Advisories · Technology
hcengineering Huly Platform.
Every CVE that names hcengineering Huly Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
Huly Platform through 0.7.432 Account Takeover via mergeSpecifiedPersons RPC
- hcengineering Huly Platform
- Broken access control
- CVSS 5.3 Medium
hcengineering Huly Platform User Information operations.ts getAccountInfo improper authorization
- hcengineering Huly Platform
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
hcengineering Huly Platform RPC operations.ts getMailboxSecret access control
- hcengineering Huly Platform
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
hcengineering Huly Platform Import Endpoint index.ts server-side request forgery
- hcengineering Huly Platform
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
hcengineering Huly Platform JWT Token token.ts hard-coded key
- hcengineering Huly Platform
- Hard-coded credentials
- CWE-320