CyberSecBulletin

Echa.europa vulnerabilities

We track 2 vulnerabilities in Echa.europa products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 2, 2023.

2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score

Latest Echa.europa vulnerabilities

  • 8.8 High severity

    Iuclid: Improper Control of Generation of Code

    CVE-2023-26546Echa.europaEPSS 1.44%

    European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Side Template Injection (SSTI) with a crafted template file. The attacker must have template manager permission.

  • 9.8 Critical severity

    Iuclid: Use of Hard-coded Credentials

    CVE-2023-26089Echa.europaEPSS 1.07%

    European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak hard-coded secret is used for JWT signing. The affected versions are 5.15.0 through 6.27.5.