Advisories · Technology
toeverything AFFiNE.
Every CVE that names toeverything AFFiNE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
toeverything AFFiNE Public Markdown Preview Endpoint :docId allowDocPreview authorization
- toeverything AFFiNE
- Broken access control
- CVSS 6.9 Medium
AFFiNE: Open Redirect via Regex Bypass in redirect-proxy
- toeverything AFFiNE
- Open redirect
- CVSS 8.8 High
AFFiNE: One-click Remote Code Execution through Custom URL Handling
- toeverything AFFiNE
- Code injection
- CVSS 5.1 Medium
toeverything AFFiNE Avatar Upload Image Endpoint cross site scripting
- toeverything AFFiNE
- Cross-site scripting (XSS)
- Code injection