Filtered by vendor Linqi Subscriptions
Filtered by product Linqi Subscriptions
Total 6 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-33868 2 Linqi, Microsoft 2 Linqi, Windows 2025-04-28 9.8 Critical
An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection.
CVE-2024-33867 2 Linqi, Microsoft 2 Linqi, Windows 2025-04-28 4.8 Medium
An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt.
CVE-2024-33866 2 Linqi, Microsoft 2 Linqi, Windows 2025-04-28 5.5 Medium
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/{GUID] XSS.
CVE-2024-33864 2 Linqi, Microsoft 2 Linqi, Windows 2025-04-28 5.9 Medium
An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in process creation, file inclusion, and PDF document generation via malicious JavaScript.
CVE-2024-33865 2 Linqi, Microsoft 2 Linqi, Windows 2025-04-28 7.5 High
An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/{GUID] endpoints.
CVE-2024-33863 2 Linqi, Microsoft 2 Linqi, Windows 2025-04-28 9.8 Critical
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion.