Linqi Security Vulnerabilities and Issues — Linqi CVE List

Lucene search

LinqiLinqi

6 matches found

CVE•added 2024/05/14 4:17 p.m.•114 views

CVE-2024-33866

An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/{GUID] XSS.

5.5CVSS6.8AI score0.00347EPSS

CVE•added 2024/05/14 4:17 p.m.•93 views

CVE-2024-33863

An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion.

9.8CVSS6.7AI score0.00457EPSS

CVE•added 2024/05/14 4:17 p.m.•89 views

CVE-2024-33865

An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/{GUID] endpoints.

7.5CVSS6.8AI score0.00319EPSS

CVE•added 2024/05/14 4:17 p.m.•63 views

CVE-2024-33867

An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt.

4.8CVSS7AI score0.00098EPSS

CVE•added 2024/05/14 4:17 p.m.•63 views

CVE-2024-33868

An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection.

9.8CVSS7.2AI score0.00229EPSS

CVE•added 2024/05/14 4:17 p.m.•45 views

CVE-2024-33864

An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in process creation, file inclusion, and PDF document generation via malicious JavaScript.

5.9CVSS7AI score0.00123EPSS