Squidex
Squidex · 8 CVEs
Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction
Apr 22, 2026
Squidex vulnerable to Server-Side Request Forgery (SSRF) via URL-based asset upload (/api/apps/{app}/assets)
Apr 22, 2026
SSRF via Jint Scripting Engine HTTP Functions Due to Missing SSRF Protection on "Jint" HttpClient
Apr 22, 2026
Squidex has SSRF via Backup Restore Endpoint — Admin-Controlled URL Download Allows Internal and External Requests
Apr 22, 2026
Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration
Jan 27, 2026
Cross-Site Scripting (XSS) via postMessage Handler in Squidex
Nov 7, 2023
Remote code execution in Squidex
Nov 7, 2023
Stored Cross-site Scripting in Squidex
Nov 7, 2023
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-41177 | Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction | MEDIUM | 0.43% | Apr 22, 2026 |
| CVE-2026-41172 | Squidex vulnerable to Server-Side Request Forgery (SSRF) via URL-based asset upload (/api/apps/{app}/assets) | HIGH | 0.36% | Apr 22, 2026 |
| CVE-2026-41171 | SSRF via Jint Scripting Engine HTTP Functions Due to Missing SSRF Protection on "Jint" HttpClient | HIGH | 0.36% | Apr 22, 2026 |
| CVE-2026-41170 | Squidex has SSRF via Backup Restore Endpoint — Admin-Controlled URL Download Allows Internal and External Requests | HIGH | 0.40% | Apr 22, 2026 |
| CVE-2026-24736 | Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration | CRITICAL | 0.48% | Jan 27, 2026 |
| CVE-2023-46252 | Cross-Site Scripting (XSS) via postMessage Handler in Squidex | MEDIUM | 0.47% | Nov 7, 2023 |
| CVE-2023-46253 | Remote code execution in Squidex | CRITICAL | 1.54% | Nov 7, 2023 |
| CVE-2023-46744 | Stored Cross-site Scripting in Squidex | MEDIUM | 0.50% | Nov 7, 2023 |
Showing 1 to 8 of 8 CVEs