Advisories · Technology
TREK.
Every CVE that names TREK among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
TREK: SSRF Guard Bypass via IPv6 Transition Addresses (NAT64/6to4)
- TREK
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
liketrek TREK Journey Photo Proxy validateShareTokenForAsset authorization
- TREK
- Broken access control
- CVSS 6.3 Medium
liketrek TREK Public Journey Photo Proxy journey-public.controller.ts path traversal
- TREK
- Path traversal
- CVSS 6.3 Medium
liketrek TREK OIDC Service oidcService.ts findOrCreateUser improper authentication
- TREK
- Authentication bypass
- CVSS 5.3 Medium
liketrek TREK Journey Entry Update journey.controller.t journeyService.updateEntry sql injection
- TREK
- Other injection
- SQL injection
- CVSS 5.3 Medium
liketrek TREK Pre-2FA mfa_token authService.ts loginUser improper authentication
- TREK
- Authentication bypass