Yuque vulnerabilities
We track 2 vulnerabilities in Yuque products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 30, 2024.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Yuque vulnerabilities
- 9.8 Critical severity
RapidCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1. Affected is an unknown function of the file /resource/runlogon.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack r
- 9.8 Critical severity
xmind2testcase: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in xmind2testcase v.1.5 allows a remote attacker to execute arbitrary code via the webtool\application.py component.