Skip to content
OpenAdvisories

Vendor

BidingCC

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.3

    BidingCC BuildingAI Remote Upload API file-storage.service.ts uploadRemoteFile server-side request forgery

    A vulnerability has been found in BidingCC BuildingAI up to 26.0.1. Impacted is the function uploadRemoteFile of the file packages/core/src/modules/upload/services/file-storage.service.ts of the component Remote Upload API. The manipulation of the argument ur…