Erxes vulnerabilities

1 known vulnerability in Erxes from Erxes. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Erxes: Improper Access Control

  CVE-2024-57190Jun 10, 2025Erxes

  Erxes <1.6.1 is vulnerable to Incorrect Access Control. An attacker can bypass authentication by providing a "User" HTTP header that contains any user, allowing them to talk to any GraphQL endpoint.