Wecube-platform CVEs and Security Vulnerabilities - OpenCVE

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2022-37787

An issue was discovered in WeCube platform 3.2.2. A DOM XSS vulnerability has been found on the plugin database execution page.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Wecube-platform Project

Products

Wecube-platform

CVE-2022-37786

An issue was discovered in WeCube Platform 3.2.2. There are multiple CSV injection issues: the [Home / Admin / Resources] page, the [Home / Admin / System Params] page, and the [Home / Design / Basekey Configuration] page.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Wecube-platform Project

Products

Wecube-platform

CVE-2022-37785

An issue was discovered in WeCube Platform 3.2.2. Cleartext passwords are displayed in the configuration for terminal plugins.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Wecube-platform Project

Products

Wecube-platform

Page 1 of 1.