Advisories · Technology
rconfig.
Every CVE that names rconfig among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php
- rconfig
- Authentication bypass
- CWE-1188
- CVSS 7.1 High
rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint
- rconfig
- Path traversal
- CVSS 7.1 High
rConfig < 8.2.13 Path Traversal File Read via FileDownloadController
- rConfig
- Path traversal