Uasoft vulnerabilities
We track 2 vulnerabilities in Uasoft products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 10, 2026.
2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score
Latest Uasoft vulnerabilities
- 7.3 High severity
Badaso: Incorrect Privilege Assignment
A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class of the file src/Routes/api.php of the component File API. The manipulation leads to permission issues. It is possible to initiate the attack
- 8.1 High severity
badaso: Weak Password Recovery Mechanism for Forgotten Password
A security vulnerability has been detected in Uasoft badaso up to 2.9.7. Affected is the function forgetPassword of the file src/Controllers/BadasoAuthController.php of the component Token Handler. Such manipulation leads to weak password recovery. The attack