97 matches found
PT-2025-3081 · Teedy · Teedy
Name of the Vulnerable Software and Affected Versions: Teedy versions 1.9 through 1.12 Description: The issue arises when the LDAP connection is activated, allowing an unauthenticated attacker to exploit the username field of the login form due to improper sanitization of user input. This enables...
CVE-2024-54852
When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injection. Due to improper sanitization of user input, an unauthenticated attacker is then able to perform various malicious actions, such as creating arbitrary...
PT-2025-3080 · Teedy · Teedy
Name of the Vulnerable Software and Affected Versions: Teedy versions 1.12 and earlier Description: The issue is related to Cross Site Request Forgery CSRF, which occurs due to the lack of CSRF protection. Recommendations: For Teedy versions 1.12 and earlier, as a temporary workaround, consider...
CVE-2024-54852
Teedy versions 1.9 through 1.12 are vulnerable to LDAP injection when the LDAP connection is activated. The root cause is the improper sanitization of user input within the username field of the login form. An unauthenticated attacker can exploit this to perform malicious actions, including creat...
CVE-2024-54851: Cross-Site Request Forgery (CSRF)
Teedy = 1.12 is vulnerable to Cross Site Request Forgery CSRF, due to the lack of CSRF protection...
CVE-2024-54851
Teedy = 1.12 is vulnerable to Cross Site Request Forgery CSRF, due to the lack of CSRF protection...
CVE-2024-54852
When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injection. Due to improper sanitization of user input, an unauthenticated attacker is then able to perform various malicious actions, such as creating arbitrary...
CVE-2024-54851
Teedy versions 1.12 and earlier are vulnerable to Cross-Site Request Forgery (CSRF) due to a lack of proper CSRF protection mechanisms. This flaw could allow an attacker to perform unauthorized actions on behalf of a user. As of the current reports, there is no information regarding a newer versi...
Teedy 安全漏洞
Teedy is a French Teedy open source open source, lightweight document management system for individuals and businesses. A security vulnerability exists in Teedy 1.12 and earlier versions, which stems from a lack of cross-site request forgery CSRF protection and vulnerability to cross-site request...
CVE-2025-22963
Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin...
CVE-2025-22963
CVE-2025-22963 affects Teedy up to version 1.11. The issue is a CSRF vulnerability that permits account takeover via POST /api/user/admin. Several connected sources confirm the affected software and the vulnerable endpoint, with Red Hat/Redundant feeds and PT-2025-4751 noting a workaround (restri...
Teedy 安全漏洞
Teedy is a French Teedy open source open source, lightweight document management system for individuals and businesses. A security vulnerability exists in Teedy 1.11 and earlier versions, which stems from vulnerability to cross-site request forgery CSRF attacks, which can be realized through the...
CVE-2025-22963
Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin...
CVE-2025-22963
Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin...
CVE-2025-22963: Cross-Site Request Forgery (CSRF)
Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin...
CVE-2025-22963
Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin...
PT-2025-4751 · Teedy · Teedy
Name of the Vulnerable Software and Affected Versions: Teedy versions 1.11 and earlier Description: The issue allows for CSRF, enabling account takeover via POST "/api/user/admin". This can be exploited to gain unauthorized access to user accounts. Recommendations: For versions 1.11 and earlier, ...
CVE-2024-46278
Teedy 1.11 is vulnerable to Cross Site Scripting XSS via the management console...