fuxa-server vulnerabilities (npm)
21 vulnerabilities.
-
fuxa-servernpm FUXA: Scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions 6.3 Medium -
fuxa-servernpm FUXA: SQL injection in TDengine DAQ connector via backslash bypass of escapeTdString 5.3 Medium -
fuxa-servernpm FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading 8.2 High -
fuxa-servernpm FUXA provides guest and invalid-token access to protected read APIs in secure mode 5.5 Medium -
fuxa-servernpm FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations 7.5 High -
fuxa-servernpm FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass 8.9 High -
fuxa-servernpm FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue 7.7 High -
fuxa-servernpm FUXA has a Path Traversal Sanitization Bypass 8.6 High -
fuxa-servernpm FUXA Unauthenticated Remote Arbitrary Scheduler Write 9.3 Critical -
fuxa-servernpm FUXA Unauthenticated Remote Code Execution in Node-RED Integration 9.5 Critical -
fuxa-servernpm FUXA Unauthenticated Remote Arbitrary Device Tag Write 9.3 Critical -
fuxa-servernpm FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API 9.5 Critical -
fuxa-servernpm FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration 9.5 Critical -
fuxa-servernpm FUXA Unauthenticated Exposure of Plaintext Database Credentials 9.1 Critical -
fuxa-servernpm FUXA Unauthenticated Remote Code Execution via Admin JWT Minting 10.0 Critical -
fuxa-servernpm FUXA allows Remote Code Execution (RCE) via the project import functionality. 9.8 Critical -
fuxa-servernpm FUXA contains an Unrestricted File Upload vulnerability 9.8 Critical -
fuxa-servernpm FUXA contains an insecure default configuration vulnerability 9.3 Critical -
fuxa-servernpm FUXA SQL Injection vulnerability 9.8 Critical -
fuxa-servernpm FUXA local file inclusion vulnerability 7.5 High -
fuxa-servernpm FUXA SQL Injection vulnerability 7.5 High