Vulnerabilidades do Itflow Itflow

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Itflow Itflow: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:itflow:itflow

CVE-2026-97735 Alta · 8.0 CWE-79 25/09/2026

Cross-site Scripting (XSS) em Itflow

ITFlow before 26.08 allows SVG attachments in the ticket email parser (cron/ticket_email_parser.php) for email messages that may arrive over SMTP from arbitrary senders.

CVE-2025-67081 Média · 4.9 CWE-89 15/01/2026

SQL Injection em Itflow

An SQL injection vulnerability in Itflow through 25.06 has been identified in the "role_id" parameter when editing a profile. An attacker with admin account can exploit this issue via blind SQL injection, allowing for the extraction of arbitrary data from the database. The vulnerability arises from insufficient sanitizing on integer parameter.