CVE Browser

An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into chat group.

CVSS 6.5 EPSS 0.53% Oct 25, 2024

CVE-2024-27707 MEDIUM

Server Side Request Forgery (SSRF) vulnerability in hcengineering Huly Platform v.0.6.202 allows attackers to run arbitrary code via upload of crafted SVG file.

CVSS 4.3 EPSS 0.33% Mar 7, 2024

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2026-91079	Huly Platform through 0.7.426 SSRF via Print Service	MEDIUM	6.3	0.37%	Sep 14, 2026
CVE-2026-56769	Huly Platform - Server-Side Request Forgery via /import Endpoint	MEDIUM	6.3	0.37%	Jun 25, 2026
CVE-2026-12213	hcengineering Huly Platform User Information operations.ts getAccountInfo improper authorization	MEDIUM	5.3	0.20%	Jun 15, 2026
CVE-2026-12212	hcengineering Huly Platform RPC operations.ts getMailboxSecret access control	MEDIUM	5.3	0.21%	Jun 15, 2026
CVE-2026-5623	hcengineering Huly Platform Import Endpoint index.ts server-side request forgery	MEDIUM	5.3	0.34%	Apr 6, 2026
CVE-2026-5622	hcengineering Huly Platform JWT Token token.ts hard-coded key	MEDIUM	6.3	0.39%	Apr 6, 2026
CVE-2024-48450	An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into chat group.	MEDIUM	6.5	0.53%	Oct 25, 2024
CVE-2024-27707	Server Side Request Forgery (SSRF) vulnerability in hcengineering Huly Platform v.0.6.202 allows attackers to run arbitrary code via upload of crafted SVG file.	MEDIUM	4.3	0.33%	Mar 7, 2024

Rows per page

Showing 1 to 8 CVEs · page 1