elecV2 vulnerabilities
We track 2 vulnerabilities in elecV2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 28, 2026.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest elecV2 vulnerabilities
- 7.3 High severity
elecV2P: Server-Side Request Forgery
A vulnerability was identified in elecV2 elecV2P up to 3.8.3. This affects the function eAxios of the file /mock of the component URL Handler. Such manipulation of the argument req leads to server-side request forgery. It is possible to launch the attack remot
- 7.3 High severity
elecV2P: Improper Neutralization of Special Elements used in a Command
A flaw has been found in elecV2 elecV2P up to 3.8.3. This issue affects the function pm2run of the file /rpc. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The pr