eGovFramework/egovframe-common-components vulnerabilities
We track 1 vulnerability in eGovFramework/egovframe-common-components products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 19, 2025.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest eGovFramework/egovframe-common-components vulnerabilities
- 8.7 High severity
eGovFramework/egovframe-common-components: Insufficient Verification of Data Authenticity
eGovFramework/egovframe-common-components versions up to and including 4.3.1 includes Web Editor image upload and related file delivery functionality that uses symmetric encryption to protect URL parameters, but exposes an encryption oracle that allows attacke