Skip to content
OpenAdvisories

Product · thexerteproject

xerteonlinetoolkits

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-41459 Public exploit

    Xerte Online Toolkits Path Disclosure via /setup

    Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the full server-side filesystem path of the application root. Attackers can send a GET request to the /setup page…

    thexerteproject xerteonlinetoolkits