TenderDocTransfer vulnerabilities

4 known vulnerabilities in TenderDocTransfer from Chunghwa Telecom. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  TenderDocTransfer: Absolute Path Traversal

  CVE-2025-13283Nov 17, 2025Chunghwa Telecom

  TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Copy and Paste vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, un

• 8.1 High severity

  TenderDocTransfer: Absolute Path Traversal

  CVE-2025-13282Nov 17, 2025Chunghwa Telecom

  TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenti

• 8.1 High severity

  TenderDocTransfer: Relative Path Traversal

  CVE-2024-12642Dec 16, 2024Chunghwa Telecom

  TenderDocTransfer from Chunghwa Telecom has an Arbitrary File Write vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenticated r

• 9.6 Critical severity

  TenderDocTransfer: Improper Neutralization of Input During Web Page Generation

  CVE-2024-12641Dec 16, 2024Chunghwa TelecomEPSS 1.43%

  TenderDocTransfer from Chunghwa Telecom has a Reflected Cross-site scripting vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthen