Skip to content
OpenAdvisories

Vendor

abpframework

2 known vulnerabilities.

Products

abp 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-125753

    ABP Framework before 10.6.2 and 10.7.0 Path Traversal via Blogging File Endpoints

    ABP Framework 2.9.0 before 10.6.2 and 10.7.0 pre-releases before 10.7.0 contain a path traversal vulnerability in DefaultBlobFilePathCalculator that allows unauthenticated attackers to access files outside the blob container. Attackers can send %5C-encoded ba…

    abpframework abp
  • Medium 6.8
    CVE-2026-123618

    ABP Framework before 10.7.1 Authentication Bypass via External Login Provider

    ABP Framework before 10.7.1 contains an authentication bypass vulnerability that skips account state and two-factor checks when password login succeeds through a registered IExternalLoginProvider. Attackers holding the external directory password for deactiva…

    abpframework abp