Advisories · Technology
dataelement bisheng.
Every CVE that names dataelement bisheng among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox
- dataelement bisheng
- Broken access control
- CVSS 8.8 High
BISHENG Unauthenticated Server-Side Request Forgery via Workflow Report Callback
- dataelement bisheng
- Server-side request forgery (SSRF)
- CVSS 8.7 High
BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once
- dataelement bisheng
- Code injection