Approved changes feed: RSS · Atom

cpe:2.3:a:lcg0124:bootdo:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLcg0124 (1c65fb3e-3051-5f71-81a3-c5dcd0db23fa)
ProductBootdo (519f2f5a-b03f-59c9-ac38-4ecf64312d93)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1835 vulnerable 2026-06-08 07:49:09.728050 lcg0124 BootDo cross-site request forgery
MEDIUM (4.3)
A vulnerability was identified in lcg0124 BootDo up to e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb. This affects an unknown part. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified.
Published: 2026-02-04T00:02:08.877Z
Updated: 2026-02-23T09:16:25.074Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1406 vulnerable 2026-06-08 07:49:08.498506 lcg0124 BootDo Host Header AccessControlFilter.java redirectToLogin
LOW (3.5)
A vulnerability was determined in lcg0124 BootDo up to 5ccd963c74058036b466e038cff37de4056c1600. Affected by this vulnerability is the function redirectToLogin of the file AccessControlFilter.java of the component Host Header Handler. This manipulation of the argument Hostname causes open redirect. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available.
Published: 2026-01-25T12:02:05.605Z
Updated: 2026-02-23T08:53:49.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1136 vulnerable 2026-06-08 07:47:14.372171 lcg0124 BootDo ContentController save cross site scripting
LOW (3.5)
A weakness has been identified in lcg0124 BootDo up to e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb. Affected is the function Save of the file /blog/bContent/save of the component ContentController. This manipulation of the argument content/author/title causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided.
Published: 2026-01-19T03:32:05.721Z
Updated: 2026-02-23T08:41:22.869Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.