Vulnerabilities in indico
14 resultsCVE-2026-33046HIGHIndico discloses local files resulting in Remote Code Execution through LaTeX injectionEPSS 0.8%CVE-2025-53640MEDIUMIndico vulnerable to user enumeration via API endpointEPSS 0.7%CVE-2023-37901MEDIUMCross-Site-Scripting via confirmation promptsEPSS 0.5%CVE-2024-45399MEDIUMIndico has a Cross-Site-Scripting during account creationEPSS 0.4%CVE-2026-107394MEDIUMIndico: Incomplete Server-Side Request Forgery (SSRF) checkEPSS 0.3%CVE-2026-28352MEDIUMIndico missing access check in event series management APIEPSS 0.3%CVE-2026-25738MEDIUMIndico has Server-Side Request Forgery (SSRF) in multiple placesEPSS 0.3%CVE-2025-59034MEDIUMIndico may disclose unauthorized user details access via legacy APIEPSS 0.3%CVE-2026-108388LOWIndico legacy contribution export cache poisoning discloses restricted metadataEPSS 0.3%CVE-2026-107395MEDIUMIndico: Missing access check in legacy session export APIEPSS 0.2%CVE-2026-107397MEDIUMIndico: Cross-Site-Scripting in minutes editorEPSS 0.2%CVE-2025-59035MEDIUMIndico vulnerable to Cross-Site Scripting via LaTeX math codeEPSS 0.2%CVE-2026-107396MEDIUMIndico: Cross-Site-Scripting in link fieldsEPSS 0.2%CVE-2026-25739MEDIUMIndico affected by Cross-Site-Scripting via material uploadsEPSS 0.2%