Skip to content
OpenAdvisories

Vendor

Worklenz

4 known vulnerabilities.

Products

worklenz 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-104060

    Worklenz < 3.3.0 SQL Injection via Reporting Members Endpoint

    Worklenz before 3.3.0 contains an SQL injection vulnerability in the reporting members endpoints that allows authenticated attackers to read arbitrary database contents by injecting SQL through the projects and status parameters. Attackers can send crafted va…

    Worklenz worklenz
  • Medium 6.5
    CVE-2026-85389

    Worklenz before 3.0.0 Authorization Bypass on Task-Scoped Endpoints

    Worklenz before 3.0.0 fails to verify task ownership by organization when resolving task-scoped API endpoints, allowing authenticated users to access another tenant's task data. Attackers can query task endpoints with arbitrary task UUIDs to retrieve work log…

    Worklenz worklenz