Advisories · Technology
eGovFramework/egovframe-common-components.
Every CVE that names eGovFramework/egovframe-common-components among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
eGovFramework <= 4.3.1 Unauthenticated File Upload via Web Editor Image Upload Endpoints
- eGovFramework/egovframe-common-components
- Unrestricted file upload
- CVSS 8.7 High
eGovFramework <= 4.3.1 Unauthenticated Encryption Oracle via Web Editor Image Upload Endpoints
- eGovFramework/egovframe-common-components
- CWE-345