3 matches found
CVE-2025-22963
Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.
CVE-2024-54852
When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injection. Due to improper sanitization of user input, an unauthenticated attacker is then able to perform various malicious actions, such as creating arbitrary accoun...
CVE-2024-54851
Teedy