Repox vulnerabilities
We track 4 vulnerabilities in Repox products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 13, 2023.
Latest Repox vulnerabilities
- 9.8 Critical severity
Repox: Unrestricted Upload of File with Dangerous Type
An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromi
- 7.5 High severity
Repox: Relative Path Traversal
A path traversal vulnerability has been detected in Repox, which allows an attacker to read arbitrary files on the running server, resulting in a disclosure of sensitive information. An attacker could access files such as application code or data, backend cred
- 7.5 High severity
Repox: Improper Restriction of XML External Entity Reference
An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere with the application's XML data processing in the fileupload function, resulting in interaction between the attacker and the server's file system.
- 7.5 High severity
Repox: Missing Authentication for Critical Functionality
An authentication bypass vulnerability has been found in Repox, which allows a remote user to send a specially crafted POST request, due to the lack of any authentication method, resulting in the alteration or creation of users.