17 matches found
CVE-2026-52474
An issue in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file...
CVE-2026-52475
Cross Site Scripting vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file...
CVE-2026-52476
SQL Injection vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file...
CVE-2026-52475
A Cross Site Scripting (XSS) vulnerability exists in aiflowy versions prior to 2.1.3 . The root cause is located within the UploadController.java file, which allows a remote attacker to obtain sensitive information. To remediate this issue, users should update aiflowy to version 2.1.3 or later. N...
CVE-2026-52474
An issue in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file...
PT-2026-62090
Name of the Vulnerable Software and Affected Versions aiflowy versions prior to 2.1.3 Description A Cross Site Scripting XSS issue exists where a remote attacker can obtain sensitive information. The flaw is located within the UploadController.java file. Recommendations Update aiflowy to version...
CVE-2026-52475: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file...
PT-2026-62089
An issue in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file...
CVE-2026-52475
Cross Site Scripting vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file...
PT-2026-62091
SQL Injection vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file...
CVE-2026-52474: Exposure of Sensitive Information to an Unauthorized Actor
An issue in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file...
CVE-2026-52476
SQL Injection vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file...
CVE-2026-52474
A vulnerability exists in aiflowy versions
CVE-2026-52475
Cross Site Scripting vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file...
CVE-2026-52476: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file...