Skip to content
OpenAdvisories

Vendor

bufanyun

3 known vulnerabilities.

Products

HotGo 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-3683

    bufanyun HotGo Endpoint upload.go ImageTransferStorage server-side request forgery

    A vulnerability was detected in bufanyun HotGo up to 2.0. This issue affects the function ImageTransferStorage of the file /server/internal/logic/common/upload.go of the component Endpoint. The manipulation results in server-side request forgery. The attack m…

    bufanyun HotGo