Saltcorn vulnerabilities
Products
- Saltcorn 4
Newest
- saltcorn Saltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backslash bypass) 5.1 Medium
- saltcorn Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId) 10.0 Critical
- saltcorn Saltcorn has an Unauthenticated Path Traversal in sync endpoints allows arbitrary file write and directory read 8.2 High
- saltcorn Logged-in users with any role can delete arbitrary files in @saltcorn/server 6.5 Medium