Tendcode - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2024-11-08.

Products

• Izone - 2 CVEs

Newest CVEs of Tendcode

• CVE-2024-50811 - CVSS 9.1 (critical), 2024-11-08: hopetree izone lts c011b48 contains a server-side request forgery (SSRF) vulnerability in the active push function as \\apps\\tool\\apis\\bd_push.py does not…
• CVE-2024-50810 - CVSS 5.4 (medium), 2024-11-08: hopetree izone lts c011b48 contains a Cross Site Scripting (XSS) vulnerability in the article comment function. In \apps\comment\views.py, AddCommintView()…