Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: windmill_project'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-22683 8.8 Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity creation and modification actions via the backend API. Although Operators are documented and 2026-04-24 16:49:50
CVE-2026-29059 7.5 Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to version 1.603.3, an unauthenticated path traversal vulnerability exists in Windmill's get_log_file endpoint "(/api/w/{workspace}/jobs_ 2026-04-14 17:48:25
CVE-2022-31519 6.4 The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. 2022-07-15 11:24:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/1
Zapisa po stranici: