Skip to content
OpenAdvisories

Vendor

eGovFramework/egovframe-common-components

2 known vulnerabilities.

Products

eGovFramework/egovframe-common-components 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2025-34337

    eGovFramework <= 4.3.1 Unauthenticated Encryption Oracle via Web Editor Image Upload Endpoints

    eGovFramework/egovframe-common-components versions up to and including 4.3.1 includes Web Editor image upload and related file delivery functionality that uses symmetric encryption to protect URL parameters, but exposes an encryption oracle that allows attack…

    eGovFramework/egovframe-common-components eGovFramework/egovframe-common-components