Vulnerabilities in avo-hq

7 results

Vexday analysis

A Avo-HQ possui 7 vulnerabilidades registradas, com 1 crítica e 2 publicadas recentemente (últimos 90 dias), porém nenhuma sob exploração ativa conhecida. A fraqueza dominante é cross-site scripting (CWE-79), típica de aplicações web, que representa risco moderado se explorada manualmente, mas sem indicadores de campanha organizada no momento.

CVE-2023-34102HIGHPossible unsafe reflection / partial denial of service in avoEPSS 1.6%CVE-2024-22191HIGHStored cross-site scripting (XSS) in `key_value` field in AvoEPSS 0.7%CVE-2024-22411MEDIUMCross site scripting in Action messages on AvoEPSS 0.7%CVE-2023-34103HIGHStored XSS (Cross Site Scripting) in html content based fields of avoEPSS 0.6%CVE-2026-55518CRITICALAvo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege EscalationEPSS 0.3%CVE-2026-42205HIGHAvo: Broken Access Control: Unauthorized Execution of Arbitrary Action Classes Across ResourcesEPSS 0.3%CVE-2026-33209MEDIUMAvo has a XSS vulnerability on `return_to` paramEPSS 0.3%