Products: 2
Vulnerabilities: 3
Known Exploited: 0
0
Critical Level Threats
1
High Level Threats
2
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-111666
Steedos Platform through 3.0.15-beta.51 Cross-Tenant Information Disclosure via Reports API
Last Modified: Oct 16, 2026
Published: Oct 16, 2026
CVE-2026-91922
Steedos Platform through 3.0.15-beta.47 Reflected XSS via page render
Last Modified: Sep 15, 2026
Published: Sep 15, 2026
CVE-2020-35666
Steedos Platform through 1.21.24 allows NoSQL injection because the /api/collection/findone implementation in server/packages/steedos_base.js mishandles req.body validation, as demonstrated by MongoDB operator attacks such as an X-User-Id[$ne]=1 value.
Last Modified: Nov 21, 2024
Published: Dec 23, 2020
Items Per Page
