Advisories · Technology
open-zaak.
Every CVE that names open-zaak among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Open Zaak: Path traversal / arbitrary server-file read via Documenten API document import (bestandspad)
- open-zaak
- Information disclosure
- CVSS 6.5 Medium
Open Zaak: /zaken/_zoek and /enkelvoudiginformatieobjecten/_zoek endpoints do not filter result lists based on authorizations linked to token
- open-zaak
- Broken access control
- CVSS 4.7 Medium
CORS configuration is possibly vulnerable
- open-zaak
- CWE-346