Groundhogg vulnerabilities

3 known vulnerabilities in Groundhogg from Adrian Tobey. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Groundhogg: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-57389Jul 13, 2026Adrian Tobey

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Adrian Tobey Groundhogg groundhogg allows Path Traversal.This issue affects Groundhogg: from n/a through <= 4.4.1.

• 9.1 Critical severity

  Groundhogg: Unrestricted Upload of File with Dangerous Type

  CVE-2025-48300Jul 16, 2025Adrian Tobey

  Unrestricted Upload of File with Dangerous Type vulnerability in Adrian Tobey Groundhogg groundhogg allows Upload a Web Shell to a Web Server.This issue affects Groundhogg: from n/a through <= 4.2.1.

• 7.1 High severity

  Groundhogg: Improper Neutralization of Input During Web Page Generation

  CVE-2024-56289Jan 7, 2025Adrian Tobey

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey Groundhogg groundhogg allows Reflected XSS.This issue affects Groundhogg: from n/a through <= 3.7.3.3.