Approved changes feed: RSS · Atom

cpe:2.3:a:todesktop:builder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTodesktop (8f61628a-c727-5ca3-905e-6f03d37e01f8)
ProductBuilder (a579ed33-98c9-535e-9154-7aa845b16050)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-67231 vulnerable 2026-06-08 07:41:19.752928 Details available
A reflected cross-site scripting (XSS) vulnerability in ToDesktop Builder v0.33.1 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload.
Published: 2026-01-23T00:00:00.000Z
Updated: 2026-01-23T18:32:42.066Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67230 vulnerable 2026-06-08 07:41:19.752541 Details available
Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation.
Published: 2026-01-23T00:00:00.000Z
Updated: 2026-01-23T16:44:02.831Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67229 vulnerable 2026-06-08 07:41:19.752195 Details available
An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof backend responses by exploiting insufficient certificate validation.
Published: 2026-01-23T00:00:00.000Z
Updated: 2026-01-23T18:44:31.285Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.