Melis Technology vulnerabilities
We track 3 vulnerabilities in Melis Technology products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 8, 2025.
Latest Melis Technology vulnerabilities
- 9.3 Critical severity
Melis Platform: Path Equivalence: 'filename....' (Multiple Trailing Dot)
File upload leading to remote code execution (RCE) in the “melis-cms-slider” module of Melis Technology's Melis Platform. This vulnerability allows an attacker to upload a malicious file via a POST request to '/melis/MelisCmsSlider/MelisCmsSliderDetails/saveDe
- 9.3 Critical severity
Melis Platform: Missing Authorization
Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'.
- 9.3 Critical severity
Melis Platform: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'idPage' parameter in the '/melis/MelisCms/PageEdition/ge