Lakernote vulnerabilities
We track 4 vulnerabilities in Lakernote products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 22, 2024.
Latest Lakernote vulnerabilities
- 8.8 High severity
EasyAdmin: Server-Side Request Forgery
A vulnerability, which was classified as critical, was found in lakernote EasyAdmin up to 20240315. Affected is the function thumbnail of the file src/main/java/com/laker/admin/module/sys/controller/IndexController.java. The manipulation of the argument url le
- 8.8 High severity
EasyAdmin: Server-Side Request Forgery
A vulnerability, which was classified as critical, has been found in lakernote EasyAdmin up to 20240315. This issue affects some unknown processing of the file /ureport/designer/saveReportFile. The manipulation leads to server-side request forgery. The attack
- 8.8 High severity
EasyAdmin: Improper Restriction of XML External Entity Reference
A vulnerability classified as problematic was found in lakernote EasyAdmin up to 20240315. This vulnerability affects unknown code of the file /ureport/designer/saveReportFile. The manipulation leads to xml external entity reference. The attack can be initiate
- 8.8 High severity
EasyAdmin: Path Traversal: '../filedir'
A vulnerability classified as critical has been found in lakernote EasyAdmin up to 20240315. This affects an unknown part of the file /ureport/designer/saveReportFile. The manipulation of the argument file leads to path traversal: '../filedir'. It is possible