Roothub vulnerabilities

3 known vulnerabilities in Roothub from Roothub Project. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  roothub: Unrestricted Upload of File with Dangerous Type

  CVE-2024-33120May 7, 2024Roothub Project

  Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function. This vulnerability allows attackers to execute arbitrary code via a crafted JSP file.

• 9.8 Critical severity

  Roothub: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-27473Apr 12, 2022Roothub ProjectEPSS 1.31%

  SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely.

• 9.8 Critical severity

  Roothub: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-27472Apr 12, 2022Roothub ProjectEPSS 1.31%

  SQL injection vulnerability in Topics Counting feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely.