Skip to content
OpenAdvisories

Package · Maven

org.zkoss.zk:zk

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2022-36537 Exploited · Ransomware Public exploit Scanner template EPSS 96%

    ZK Framework vulnerable to malicious POST

    ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader.

    org.zkoss.zk:zk Maven
    KEV Feb 27, 2023