Onboardlite
Approved changes feed: RSS · Atom
cpe:2.3:a:hackucf:onboardlite:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Hackucf (fcb33dfb-d6e8-510f-9d64-eb0dac7741c9) |
|---|---|
| Product | Onboardlite (f63df95d-5b38-5809-bb86-d81f12907739) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-23880 |
vulnerable | 2026-06-08 07:51:16.382512 |
OnboardLite has stored Cross-site Scripting issue that may lead to admin Account Take Over
HIGH (7.3)
OnboardLite is a comprehensive membership lifecycle platform built for student organizations at the University of Central Florida. Versions of the software prior to commit 1d32081a66f21bcf41df1ecb672490b13f6e429f have a stored cross-site scripting vulnerability that can be rendered to an admin when they attempt to migrate a user's discord account in the dashboard. Commit 1d32081a66f21bcf41df1ecb672490b13f6e429f patches the issue.
Published: 2026-01-19T20:55:28.469Z
Updated: 2026-01-20T15:12:32.529Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55751 |
vulnerable | 2026-06-08 07:33:15.340034 |
OnboardLite Open Redirect Endpoint
OnboardLite is the result of the Influx Initiative, our vision for an improved student organization lifecycle at the University of Central Florida. An attacker can craft a link to the trusted application that, when visited, redirects the user to a malicious external site. This enables phishing, credential theft, malware delivery, and trust abuse. Any version with commit hash 6cca19e or later implements jwt signing for the redirect url parameter.
Published: 2025-08-20T15:31:48.496Z
Updated: 2025-08-20T18:07:13.067Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.