Approved changes feed: RSS · Atom

cpe:2.3:a:linecorp:central_dogma:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLinecorp (d44df211-17ec-5a56-9e39-7a6dbeb881d3)
ProductCentral Dogma (0bf0e8f2-ea2b-5bb3-aa5a-269473c2e205)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/line/centraldogma purl2cpe 2026-06-01 10:12:14.036266
pkg:github/line/centraldogma purl2cpe 2026-06-01 10:12:14.036267
pkg:maven/com.linecorp.centraldogma/centraldogma-common purl2cpe 2026-06-01 10:12:14.036269

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11222 vulnerable 2026-06-03 14:58:35.649663 Details available
MEDIUM (6.1)
Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URLs, potentially facilitating phishing attacks and credential theft.
Published: 2025-12-04T12:18:14.206Z
Updated: 2025-12-04T14:41:14.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1143 vulnerable 2026-06-03 14:54:26.282846 Details available
CRITICAL (9.3)
Central Dogma versions prior to 0.64.1 is vulnerable to Cross-Site Scripting (XSS), which could allow for the leakage of user sessions and subsequent authentication bypass.
Published: 2024-02-02T06:01:39.341Z
Updated: 2025-06-03T18:49:03.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38388 vulnerable 2026-06-03 14:45:01.910410 Details available
HIGH (8.8)
Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the authorization of the project.
Published: 2021-09-08T17:50:45.000Z
Updated: 2025-05-12T01:31:17.817Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.