Vulnerabilities in itflow-org

3 results

CVE-2026-54596HIGHITFlow: Authenticated SQL Injection via recurring_invoice_frequency Parameter Enables Full Database ExfiltrationEPSS 0.5%CVE-2026-54597HIGHITFlow: Authenticated Time-Based Blind SQL Injection in ITFlow via expires ParameterEPSS 0.4%CVE-2026-47755MEDIUMITFlow Vulnerable to Authenticated Cross-Tenant Credential Disclosure via Unprotected Credential ModalEPSS 0.4%