Skip to content
OpenAdvisories

Vendor

Squidex

11 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.1

    Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration

    Squidex is an open source headless content management system and content management hub. Versions of the application up to and including 7.21.0 allow users to define "Webhooks" as actions within the Rules engine. The url parameter in the webhook configuration…

  • Critical 9.1

    Remote code execution in Squidex

    Squidex is an open source headless CMS and content management hub. Affected versions are subject to an arbitrary file write vulnerability in the backup restore feature which allows an authenticated attacker to gain remote code execution (RCE). Squidex allows …