Advisories · Technology
squidex.
Every CVE that names squidex among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.5 Medium
Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction
- squidex
- Path traversal
- Server-side request forgery (SSRF)
- CVSS 7.3 High
Squidex vulnerable to Server-Side Request Forgery (SSRF) via URL-based asset upload (/api/apps/{app}/assets)
- squidex
- Server-side request forgery (SSRF)
- CVSS 7.3 High
SSRF via Jint Scripting Engine HTTP Functions Due to Missing SSRF Protection on "Jint" HttpClient
- squidex
- Server-side request forgery (SSRF)
- CVSS 7.2 High
Squidex has SSRF via Backup Restore Endpoint — Admin-Controlled URL Download Allows Internal and External Requests
- squidex
- Server-side request forgery (SSRF)
- CVSS 9.1 CriticalCritical · CVSS 9+
Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration
- squidex
- Server-side request forgery (SSRF)
- CVSS 6.8 Medium
Cross-Site Scripting (XSS) via postMessage Handler in Squidex
- squidex
- Cross-site scripting (XSS)
- CVSS 9.1 CriticalCritical · CVSS 9+
Remote code execution in Squidex
- squidex
- Path traversal
- CVSS 5.4 Medium
Stored Cross-site Scripting in Squidex
- squidex
- Cross-site scripting (XSS)