Touchbase.Ai
Approved changes feed: RSS · Atom
cpe:2.3:a:puncsky:touchbase.ai:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Puncsky (298f1de1-b893-5019-bcba-d8685364d50e) |
|---|---|
| Product | Touchbase.Ai (1e1e39dc-3bad-568b-8499-c60c7ea60449) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-26221 |
vulnerable | 2026-06-08 05:23:50.896166 |
Stored Cross Site Scripting in touchbase.ai
HIGH (8)
touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting (XSS). The vulnerability allows an attacker to send malicious JavaScript code which could result in hijacking of the user's cookie/session tokens, redirecting the user to a malicious webpage and performing unintended browser action. The issue is patched in version 2.0.
Published: 2020-11-11T22:20:12.000Z
Updated: 2024-08-04T15:49:07.286Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26220 |
vulnerable | 2026-06-08 05:23:50.895632 |
Information exposure in touchbase.ai
LOW (3.5)
toucbase.ai before version 2.0 leaks information by not stripping exif data from images. Anyone with access to the uploaded image of other users could obtain its geolocation, device, and software version data etc (if present. The issue is fixed in version 2.0.
Published: 2020-11-11T22:15:14.000Z
Updated: 2024-08-04T15:49:07.176Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26219 |
vulnerable | 2026-06-08 05:23:50.895006 |
Open Redirect in touchbase.ai
MEDIUM (4.7)
touchbase.ai before version 2.0 is vulnerable to Open Redirect. Impacts can be many, and vary from theft of information and credentials, to the redirection to malicious websites containing attacker-controlled content, which in some cases even cause XSS attacks. So even though an open redirection might sound harmless at first, the impacts of it can be severe should it be exploitable. The issue is fixed in version 2.0.
Published: 2020-11-11T22:05:15.000Z
Updated: 2024-08-04T15:49:07.257Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26218 |
vulnerable | 2026-06-08 05:23:50.893769 |
HTML Injection in touchbase.ai
HIGH (8)
touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HTML payloads which could result in defacement, user redirection to a malicious webpage/website etc. The issue is patched in version 2.0.
Published: 2020-11-11T22:00:14.000Z
Updated: 2024-08-04T15:49:07.206Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.