Filtered by vendor Documize
Subscriptions
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2023-23634 | 1 Documize | 1 Documize | 2024-11-21 | 9.8 Critical |
SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity endpoint. | ||||
CVE-2019-19619 | 1 Documize | 1 Documize | 2024-11-21 | 6.1 Medium |
domain/section/markdown/markdown.go in Documize before 3.5.1 mishandles untrusted Markdown content. This was addressed by adding the bluemonday HTML sanitizer to defend against XSS. |
Page 1 of 1.