Advisories · Technology
OpenBoxes.
Every CVE that names OpenBoxes among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
OpenBoxes Document Upload Controller DocumentController.groovy DocumentController unrestricted upload
- OpenBoxes
- Broken access control
- Unrestricted file upload
- CVSS 5.3 Medium
OpenBoxes Product Supplier Edit Controller RoleInterceptor.groovy improper authorization
- OpenBoxes
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
OpenBoxes Template Processing DocumentController.groovy buildZebraTemplate special elements in template engine
- OpenBoxes
- Code injection
- CWE-791
- CVSS 5.3 Medium
OpenBoxes Role Interceptor RoleInterceptor.groovy needManager privileges management
- OpenBoxes
- Privilege escalation
- CVSS 5.3 Medium
OpenBoxes Product Upload Endpoint ProductController.groovy upload server-side request forgery
- OpenBoxes
- Server-side request forgery (SSRF)