Flextype vulnerabilities
We track 1 vulnerability in Flextype products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.
1vulnerabilities
0critical
1high
0exploited
8.3average CVSS score
Latest Flextype vulnerabilities
- 8.3 High severity
flextype: Improper Limitation of a Pathname to a Restricted Directory
Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and new_id parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory. Attackers can use traversal sequences in API requests