Advisories · Technology
aces Loris.
Every CVE that names aces Loris among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
LORIS has incorrect access checks in issue_tracker
- aces Loris
- Broken access control
- CVSS 6.3 Medium
LORIS has incorrect access checks in API for Imaging Browser
- aces Loris
- Broken access control
- CVSS 4.3 Medium
LORIS has an open redirect field on login
- aces Loris
- Open redirect
- CVSS 7.7 High
LORIS has a path traversal in FilesDownloadHandler
- aces Loris
- Information disclosure
- CVSS 6.5 Medium
LORIS has potential cross-site scripting in survey_accounts module
- aces Loris
- Cross-site scripting (XSS)
- CVSS 3.5 Low
LORIS incorrectly trusts user input in publication module
- aces Loris
- Path traversal
- CVSS 8.7 High
LORIS has potential cross-site scripting in help_editor module
- aces Loris
- Cross-site scripting (XSS)
- Information disclosure
- CVSS 6.3 Medium
LORIS has incorrect access checks in document_repository
- aces Loris
- Broken access control
- CVSS 6.3 Medium
LORIS has incorrect access checks in media module
- aces Loris
- Broken access control
- CVSS 7.5 High
LORIS has a path traversal in static router
- aces Loris
- Information disclosure
- CVSS 7.5 High
LORIS has a SQL injection in MRI feedback popup
- aces Loris
- SQL injection
- CVSS 8.1 High
LORIS vulnerable to path traversal in electrophysiology_browser
- aces Loris
- Path traversal
- CVSS 8.7 High
LORIS media module vulnerable to remote code execution
- aces Loris
- Path traversal
- Unrestricted file upload