Advisories · Technology
chenhg5 cc-connect.
Every CVE that names chenhg5 cc-connect among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.2 CriticalCritical · CVSS 9+
cc-connect through 1.5.0 Missing Authentication via MAX Webhook Sender Spoofing
- chenhg5 cc-connect
- Authentication bypass
- CVSS 8.7 High
cc-connect through 1.5.0 User Allowlist Bypass via Feishu Card Actions
- chenhg5 cc-connect
- Broken access control
- CVSS 6.9 Medium
chenhg5 cc-connect Management API engine.go shellExecCommand os command injection
- chenhg5 cc-connect
- Command injection
- CVSS 6.9 Medium
chenhg5 cc-connect webhook.go authenticate code injection
- chenhg5 cc-connect
- Other injection
- Code injection