Advisories · Technology
ellite Wallos.
Every CVE that names ellite Wallos among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.6 Medium
Wallos: iCalendar Injection via CRLF in Subscription Name/Notes Export
- ellite Wallos
- Other injection
- CWE-116
- CVSS 4.3 Medium
Wallos: Authenticated SSRF via per-user SMTP notification host (low-privilege user)
- ellite Wallos
- Server-side request forgery (SSRF)
- CVSS 8.2 High
Wallos incomplete fix for CVE-2026-33407: unauthenticated httpoxy SSRF still reachable via `endpoints/payments/search.php`
- ellite Wallos
- Server-side request forgery (SSRF)
- CWE-441
- CVSS 3.5 Low
Wallos: SSRF via Unvalidated User-Level SMTP Host in Email Notification Settings
- ellite Wallos
- Server-side request forgery (SSRF)
- CVSS 8.1 High
Wallos: OIDC account takeover via email-based account linking without `email_verified` check
- ellite Wallos
- Authentication bypass
- CVSS 8.5 High
Wallos: SSRF via OIDC Token/UserInfo URL Configuration
- ellite Wallos
- Server-side request forgery (SSRF)
- CVSS 8.5 High
Wallos: Zip Slip path traversal in database restore writes files to webroot
- ellite Wallos
- Path traversal
- CVSS 8.2 High
Wallos: SSRF via Test Email Notification - unvalidated SMTP host/port
- ellite Wallos
- Server-side request forgery (SSRF)
- CVSS 8.2 High
Wallos: Unauthenticated database replacement via import endpoint on fresh install
- ellite Wallos
- Authentication bypass
- CVSS 7.5 High
Wallos: OIDC state parameter never validated — login CSRF / account takeover
- ellite Wallos
- Cross-site request forgery (CSRF)
- CVSS 7.5 High
Missing Authentication for Critical Function in wallos
- ellite Wallos
- Authentication bypass
- CVSS 4.3 Medium
Wallos: Cross-user Fixer/API Layer credential consumption in exchange-rate refresh
- ellite Wallos
- Broken access control
- CVSS 4.3 Medium
Wallos: Cross-user subscription cost inference via replacement_subscription_id
- ellite Wallos
- Broken access control
- CVSS 6.0 Medium
Wallos: Shared local webhook allowlist lets low-privilege users send arbitrary requests to allowlisted internal services
- ellite Wallos
- Broken access control
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Incomplete fix for CVE-2026-33399: SSRF in Wallos
- ellite Wallos
- Server-side request forgery (SSRF)
- CVSS 4.3 Medium
Wallos: SSRF CGNAT Bypass in subscription/payments Logo URL — is_cgnat_ip() Not Used in Inline Checks
- ellite Wallos
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Wallos: Password Reset Tokens Never Expire
- ellite Wallos
- Authentication bypass
- CVSS 7.1 High
Wallos: Incomplete fix for CVE-2026-30840 - SSRF in AI and notification endpoints bypass ssrf_helper.php
- ellite Wallos
- Server-side request forgery (SSRF)
- CVSS 5.4 Medium
Wallos: Stored cross-site scripting (XSS) vulnerability in the payment method rename endpoint
- ellite Wallos
- Cross-site scripting (XSS)
- CVSS 7.7 High
Wallos: SSRF Bypass - Incomplete Fix for CVE-2026-30839/30840
- ellite Wallos
- Server-side request forgery (SSRF)
- CVSS 8.3 High
Wallos: SSRF via HTTP Proxy Environment Variable
- ellite Wallos
- Server-side request forgery (SSRF)
- Information disclosure
- CVSS 4.3 Medium
Wallos: Authenticated Missing Authorization Allows Deletion of Other Users’ Uploaded Avatars
- ellite Wallos
- Broken access control
- CVSS 6.9 Medium
Wallos: Reflected XSS via unescaped token and email parameters in passwordreset.php
- ellite Wallos
- Cross-site scripting (XSS)
- CVSS 8.8 High
Wallos: Server-Side Request Forgery (SSRF) in Notification Testers
- ellite Wallos
- Weak cryptography or TLS
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Wallos: SSRF via webhook test endpoint
- ellite Wallos
- Server-side request forgery (SSRF)
- CVSS 8.7 High
Wallos: SSRF via url parameter leading to File Traversal
- ellite Wallos
- Path traversal
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Wallos: SSRF via Redirect Bypass in Logo/Icon URL Fetch
- ellite Wallos
- Server-side request forgery (SSRF)