Advisories · Technology
Wheels.
Every CVE that names Wheels among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.9 Medium
Wheels: Wheels through 4.1.1 derives its default production error-email address from the Host…
- Wheels
- CWE-348
- CVSS 5.9 Medium
Race condition in Wheels
- Wheels
- Race condition
- CVSS 3.7 Low
Wheels: Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks…
- Wheels
- CWE-178
- CVSS 8.1 High
Wheels: Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key…
- Wheels
- CWE-472
- CVSS 8.6 High
Incorrect authorization in Wheels
- Wheels
- Broken access control
- CVSS 8.1 High
Wheels: Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a…
- Wheels
- CWE-669
- CVSS 9.8 CriticalCritical · CVSS 9+
SQL injection in Wheels
- Wheels
- SQL injection
- CVSS 6.5 Medium
Wheels: Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a…
- Wheels
- CWE-348
- CVSS 9.8 CriticalCritical · CVSS 9+
SQL injection in Wheels
- Wheels
- SQL injection