Advisories · Technology
PandaX.
Every CVE that names PandaX among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
PandaXGO PandaX JWT Secret config.yml hard-coded key
- PandaX
- Hard-coded credentials
- CWE-320
- CVSS 6.3 Medium
PandaXGO PandaX File Extension upload.go unrestricted upload
- PandaX
- Unrestricted file upload
- CVSS 6.3 Medium
PandaXGO PandaX user.go ExportUser path traversal
- PandaX
- Path traversal
- CVSS 5.4 Medium
PandaXGO PandaX upload.go DeleteImage path traversal
- PandaX
- Path traversal
- CVSS 6.3 Medium
PandaXGO PandaX role_menu.go InsertRole sql injection
- PandaX
- SQL injection