Skip to content
OpenAdvisories

Package · npm

erxes

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-57186

    Erxes Path Traversal vulnerability

    In Erxes <1.6.2, an unauthenticated attacker can read arbitrary files from the system using a Path Traversal vulnerability in the /read-file endpoint handler.

    erxes npm
  • Medium 5.4
    CVE-2024-57189

    Erxes Path Traversal vulnerability

    In Erxes <1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHistoriesCreate GraphQL mutation handler.

    erxes npm
  • Medium 6.1
    CVE-2021-32853

    Erxes vulnerable to Cross-site Scripting

    Erxes, an experience operating system (XOS) with a set of plugins, is vulnerable to cross-site scripting in versions 0.22.3 and prior. This results in client-side code execution. The victim must follow a malicious link or be redirected there from malicious we…

    npm erxes erxes npm