10 matches found
CVE-2026-52475
Cross Site Scripting vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file...
CVE-2026-52476
SQL Injection vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file...
CVE-2026-52474
An issue in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file...
CVE-2026-52475
Cross Site Scripting vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file...
PT-2026-62090
Name of the Vulnerable Software and Affected Versions aiflowy versions prior to 2.1.3 Description A Cross Site Scripting XSS issue exists where a remote attacker can obtain sensitive information. The flaw is located within the UploadController.java file. Recommendations Update aiflowy to version...
CVE-2026-52475
CVE-2026-52475 affects aiflowy
CVE-2026-52476
SQL Injection vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file...
CVE-2026-52474
An issue in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file...
CVE-2026-52476
CVE-2026-52476 affects aiflowy up to version 2.1.2. The vulnerability is a SQL Injection in getPageData (DatacenterQuery.java), enabling a remote attacker to obtain sensitive information. Documents consistently identify the flaw, but do not provide remediation details or exploit code. No explicit...