BidingCC vulnerabilities
We track 1 vulnerability in BidingCC products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 27, 2026.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest BidingCC vulnerabilities
- 7.3 High severity
BuildingAI: Server-Side Request Forgery
A vulnerability has been found in BidingCC BuildingAI up to 26.0.1. Impacted is the function uploadRemoteFile of the file packages/core/src/modules/upload/services/file-storage.service.ts of the component Remote Upload API. The manipulation of the argument url