Linqi: Security Vulnerabilities
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion.
CVSS Score
9.8
EPSS Score
0.005
Published
2024-05-14
An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in process creation, file inclusion, and PDF document generation via malicious JavaScript.
CVSS Score
5.9
EPSS Score
0.001
Published
2024-05-14
An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/{GUID] endpoints.
CVSS Score
7.5
EPSS Score
0.003
Published
2024-05-14
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/{GUID] XSS.
CVSS Score
5.5
EPSS Score
0.003
Published
2024-05-14
An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt.
CVSS Score
4.8
EPSS Score
0.001
Published
2024-05-14
An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection.
CVSS Score
9.8
EPSS Score
0.002
Published
2024-05-14