114 matches found
CVE-2026-101142
A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Scorecard.jsp of the component Questionnaire Audio Upload. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been...
EUVD-2026-88463
A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Scorecard.jsp of the component Questionnaire Audio Upload. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been...
CVE-2026-101142 Eleveo Quality Management Questionnaire Audio Upload Scorecard.jsp path traversal
A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Scorecard.jsp of the component Questionnaire Audio Upload. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been...
CVE-2026-101142 Eleveo Quality Management Questionnaire Audio Upload Scorecard.jsp path traversal
A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Scorecard.jsp of the component Questionnaire Audio Upload. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been...
CVE-2026-101142: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Scorecard.jsp of the component Questionnaire Audio Upload. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been...
PT-2026-102332
Name of the Vulnerable Software and Affected Versions Eleveo Quality Management version 9.7.0 Description A path traversal issue exists in the Questionnaire Audio Upload component within the Scorecard.jsp file. This flaw allows a remote attacker to manipulate file paths to access unauthorized...
Eleveo Quality Management path traversal vulnerability
Eleveo Quality Management version 9.7.0 has a path traversal vulnerability. This vulnerability stems from the improper handling of the file Scorecard.jsp in the Questionnaire Audio Upload component, which may lead to path traversal attacks...
CVE-2026-85409
A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The...
CVE-2026-85409
Eleveo Quality Management 9.7.0 is affected by a path traversal vulnerability in the QuestionnaireService.runDataExportNow function of the Questionnaire Service component. Manipulating the file_name argument allows a remote attacker with low privileges to read, modify, or delete files outside the...
CVE-2026-85409 Eleveo Quality Management Questionnaire Service QuestionnaireService.runDataExportNow path traversal
A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The...
CVE-2026-85409 Eleveo Quality Management Questionnaire Service QuestionnaireService.runDataExportNow path traversal
A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The...
EUVD-2026-70889
A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The...
CVE-2026-85409: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The...
PT-2026-85398
A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument file name leads to path traversal. The attack may be performed from remote. The...
Eleveo Quality Management path traversal vulnerability
Eleveo Quality Management version 9.7.0 has a security vulnerability. This vulnerability stems from the operation of the QuestionnaireService.runDataExportNow function in the Questionnaire Service component, which involves handling the parameter filename. This may lead to path traversal attacks...
CVE-2026-45086: Missing Authorization
Decidim is a participatory democracy framework. From 0.31.1 before 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, a participant can directly load /admin/demographics/questions/editquestions and reach the demographics questionnaire editor without the required administrator authorization. The...
Access Control Bypass
Overview Affected versions of this package are vulnerable to Access Control Bypass in the demographics questionnaire admin editor interface due to missing authorization checks on the /admin/demographics/questions route. An attacker can gain unauthorized access to administrative question-managemen...
Access Control Bypass
Overview Affected versions of this package are vulnerable to Access Control Bypass in the demographics questionnaire admin editor interface due to missing authorization checks on the /admin/demographics/questions route. An attacker can gain unauthorized access to administrative question-managemen...
Decidim - Forms admin question editor lacks authorization
Description A participant can load the demographics questionnaire admin editor and make changes. Impact - Low-privilege users can access questionnaire-admin interfaces. - They can read question-management surfaces that should remain limited to questionnaire managers. Credits This issue was...
