Advisories · Technology
datacycle-engine dataCycle-CORE.
Every CVE that names datacycle-engine dataCycle-CORE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.3 High
dataCycle No Brute-Force Protection On Web And API Login Endpoints
- datacycle-engine dataCycle-CORE
- Authentication bypass
- CVSS 7.3 High
dataCycle User API Password Reset And Confirmation Flows Trust Attacker- Controlled Redirect Targets
- datacycle-engine dataCycle-CORE
- Open redirect
- CVSS 4.3 Medium
dataCycle State-Changing GET Endpoints Enable CSRF
- datacycle-engine dataCycle-CORE
- Cross-site request forgery (CSRF)
- CVSS 8.1 High
API Collection Impersonation Via user_email And Missing Object- Level Authorization
- datacycle-engine dataCycle-CORE
- Broken access control
- CVSS 7.5 High
dataCycle Authorization Bypass Via /remote_render
- datacycle-engine dataCycle-CORE
- Broken access control
- CVSS 7.5 High
dataCycle Public Markdown Path Traversal Via /docs/*path
- datacycle-engine dataCycle-CORE
- Path traversal
- CVSS 4.3 Medium
dataCycle User Directory Enumeration Via /users/search
- datacycle-engine dataCycle-CORE
- Broken access control
- CVSS 6.1 Medium
dataCycle Unauthenticated Reflected DOM XSS Via flash[...] On Public Pages
- datacycle-engine dataCycle-CORE
- Cross-site scripting (XSS)
- CVSS 7.5 High
dataCycle Public DataLink Text File Download Ignores Validity And Authorization
- datacycle-engine dataCycle-CORE
- Broken access control