Advisories · Technology
RARgames 4gaBoards.
Every CVE that names RARgames 4gaBoards among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
4gaBoards: Mass Information Disclosure (Internal PII Leakage) on /api/users to any authenticated user
- RARgames 4gaBoards
- Information disclosure
- CVSS 7.6 High
4gaBoards: SSO Pre-Account Takeover / Hijacking via Mass Assignment
- RARgames 4gaBoards
- Authentication bypass
- Broken access control
- CVSS 8.8 High
4gaBoards: Path Traversal leading to Arbitrary File Read and Deletion in Board Export
- RARgames 4gaBoards
- Path traversal
- CVSS 8.8 High
4gaBoards: Pre-Account Takeover via SSO Email Linkage
- RARgames 4gaBoards
- Authentication bypass
- CVSS 7.6 High
4ga Boards: Import Path Traversal Leads to Arbitrary File Read
- RARgames 4gaBoards
- Path traversal
- CVSS 5.3 Medium
4ga Boards: User Enumeration via Timing Side-Channel in Authentication Endpoint
- RARgames 4gaBoards
- CWE-208