Advisories · Technology
Shelf-nu shelf.nu.
Every CVE that names Shelf-nu shelf.nu among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Shelf Vulnerable to Server-Side Request Forgery (SSRF) via Asset CSV Import imageUrl Validation Bypass
- Shelf-nu shelf.nu
- Server-side request forgery (SSRF)
- CVSS 7.1 High
Shelf has cross-organization IDOR: authenticated users could read/attach another workspace's assets, tags, custodians, bookings, QR codes and audit data
- Shelf-nu shelf.nu
- Broken access control
- CVSS 6.5 Medium
Shelf: SQL Injection via sortBy Parameter
- Shelf-nu shelf.nu
- SQL injection
- CWE-20