Advisories · Technology
hargata lubelog.
Every CVE that names hargata lubelog among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
LubeLogger: IDOR in PrintRecordStickers Allows Unauthenticated Cross-User Vehicle Record Exfiltration
- hargata lubelog
- Broken access control
- CVSS 8.1 High
LubeLogger: Path Traversal in HandleTranslationFileUpload Allows Authenticated Users to Write Files Outside Data Directory
- hargata lubelog
- Path traversal
- CVSS 7.1 High
LubeLogger: IDOR in DuplicateRecordsToOtherVehicles Allows Copying Records from Any User's Vehicle Without Ownership Check
- hargata lubelog
- Broken access control