Iuclid vulnerabilities

2 known vulnerabilities in Iuclid from Echa.europa. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Iuclid: Improper Control of Generation of Code

  CVE-2023-26546May 2, 2023Echa.europaEPSS 1.44%

  European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Side Template Injection (SSTI) with a crafted template file. The attacker must have template manager permission.

• 9.8 Critical severity

  Iuclid: Use of Hard-coded Credentials

  CVE-2023-26089May 2, 2023Echa.europaEPSS 1.07%

  European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak hard-coded secret is used for JWT signing. The affected versions are 5.15.0 through 6.27.5.