Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

squidex — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in squidex, with AI-generated Chinese analysis, references, and POCs.

Vendor: Squidex

CVE IDTitleCVSSSeverityPublished
CVE-2026-41177 Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction CWE-73 5.5 Medium2026-04-22
CVE-2026-41172 Squidex vulnerable to Server-Side Request Forgery (SSRF) via URL-based asset upload (/api/apps/{app}/assets) CWE-918 4.3AIMediumAI2026-04-22
CVE-2026-41171 SSRF via Jint Scripting Engine HTTP Functions Due to Missing SSRF Protection on "Jint" HttpClient CWE-918 8.1AIHighAI2026-04-22
CVE-2026-41170 Squidex has SSRF via Backup Restore Endpoint — Admin-Controlled URL Download Allows Internal and External Requests CWE-918 6.8AIMediumAI2026-04-22
CVE-2026-24736 Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration CWE-918 9.1 Critical2026-01-27
CVE-2023-46252 Cross-Site Scripting (XSS) via postMessage Handler in Squidex CWE-79 6.8 Medium2023-11-07
CVE-2023-46253 Remote code execution in Squidex CWE-22 9.1 Critical2023-11-07
CVE-2023-46744 Stored Cross-site Scripting in Squidex CWE-79 5.4 Medium2023-11-07

All 8 known CVE vulnerabilities affecting squidex with full Chinese analysis, references, and POCs where available.