Approved changes feed: RSS · Atom

cpe:2.3:a:quadbase:espressdashboard:7.0:update9:*:*:*:*:*:*

part: a version: 7.0 update: update9

VendorQuadbase (6511c1c7-c60c-5541-9795-58ac245935b1)
ProductEspressdashboard (ccce6bd0-e905-5e83-aa02-40cac8ac54d6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-24985 vulnerable 2026-06-08 05:22:35.784568 Details available
An issue was discovered in Quadbase EspressReports ES 7 Update 9. An authenticated user is able to navigate to the MenuPage section of the application, and change the frmsrc parameter value to retrieve and execute external files or payloads.
Published: 2021-03-15T17:51:47.000Z
Updated: 2024-08-04T15:26:09.063Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24982 vulnerable 2026-06-08 05:22:35.782261 Details available
An issue was discovered in Quadbase ExpressDashboard (EDAB) 7 Update 9. It allows CSRF. An attacker may be able to trick an authenticated user into changing the email address associated with their account.
Published: 2021-03-15T17:39:38.000Z
Updated: 2024-08-04T15:26:09.895Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.