27 matches found
Axelor-vulnerability-CVE-2025-50341
CVE-2025-50341: Sql Injection on Axelor CVE ID: CVE-2025-50341 Reporter: Milad Seddigh Product: Axelor Affected Versions: v5.2.4 Impact: Sql Injection → exfiltrating database content. Summary A Boolean-based SQL injection vulnerability was discovered in the “domain” parameter of the Axelor. An...
CVE-2026-63085
Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenforced field restrictions on nested relational save operations. Attackers can modify sensitive User record fields such...
CVE-2026-63085 Axelor Open Platform 8.x < 8.2.2 Authorization Bypass via Nested Relational Record Persistence
Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenforced field restrictions on nested relational save operations. Attackers can modify sensitive User record fields such...
CVE-2026-63085 Axelor Open Platform 8.x < 8.2.2 Authorization Bypass via Nested Relational Record Persistence
Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenforced field restrictions on nested relational save operations. Attackers can modify sensitive User record fields such...
CVE-2026-63085 Axelor Open Platform 8.x < 8.2.2 Authorization Bypass via Nested Relational Record Persistence
Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenforced field restrictions on nested relational save operations. Attackers can modify sensitive User record fields such...
CVE-2026-63085
Axelor Open Platform 8.x prior to 8.2.2 contains an authorization bypass vulnerability. Authenticated non-admins can escalate privileges by exploiting unenforced field restrictions on nested relational save operations, enabling modification of sensitive User fields (roles, groups) through a relat...
PT-2026-60506
Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenforced field restrictions on nested relational save operations. Attackers can modify sensitive User record fields such...
CVE-2026-63085: Incorrect Authorization
Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenforced field restrictions on nested relational save operations. Attackers can modify sensitive User record fields such...
EUVD-2022-29881
Malicious code in bioql PyPI...
EUVD-2025-23541
Malicious code in bioql PyPI...
CVE-2025-50341
A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation...
CVE-2025-50341
A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation...
CVE-2025-50341
A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation...
CVE-2025-50341: Improper Neutralization of Special Elements used in an SQL Command
A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation...
Axelor 安全漏洞
Axelor is a modular development framework from the French company Axelor. A security vulnerability exists in Axelor version 5.2.4, which stems from a Boolean SQL injection in the domain parameter and could lead to a data leak...
PT-2025-31861 · Axelor · Axelor
Name of the Vulnerable Software and Affected Versions: Axelor version 5.2.4 Description: A Boolean-based SQL injection issue exists in Axelor version 5.2.4 through the domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data...
CVE-2025-50341
A Boolean-based SQL injection vulnerability exists in Axelor version 5.2.4 via the _domain parameter. An attacker can manipulate the SQL query logic to determine true/false conditions, which may lead to data exposure or further exploitation. Practical exploitation involves intercepting requests, ...
CVE-2025-50341
A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation...
