Skip to content
OpenAdvisories

Vendor

linqi

4 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • High 7.1

    IDOR in Comment API Allows Cross-Process Comment Read and Write

    The Comment API (GET /api/Comment and POST /api/Comment) in the affected application fails to perform authorization checks to verify that the requesting user has access to the object identified by the relatedObjectId. This Insecure Direct Object Reference (ID…

  • High 8.5

    Hardcoded Cryptographic Keys and Weak IV Generation in linqi

    The linqi application contains hardcoded cryptographic keys. Additionally, the application uses a weak algorithm with a limited ASCII charset to dynamically generate Initialization Vectors (IVs) for AES/CBC encryption, making known-plaintext attacks feasible.…