Advisories · Technology
HeliumEdu platform.
Every CVE that names HeliumEdu platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Helium: SSRF via External Calendar URL Allows Authenticated Users to Probe Internal Network
- HeliumEdu platform
- Server-side request forgery (SSRF)
- CVSS 3.5 Low
Helium: Stored XSS via Unrestricted SVG File Upload — Authenticated Users Can Store Executable Scripts
- HeliumEdu platform
- Cross-site scripting (XSS)