IN
Vendor
indico
13
CVEs
0
On KEV
5
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108388 | IN indico indico | 3.5 | Oct 13 | Indico legacy contribution export cache poisoning discloses restricted metadata |
| CVE-2026-107397 | IN indico indico | 4.4 | Oct 8 | Indico: Cross-Site-Scripting in minutes editor |
| CVE-2026-107396 | IN indico indico | 5.4 | Oct 8 | Indico: Cross-Site-Scripting in link fields |
| CVE-2026-107395 | IN indico indico | 4.3 | Oct 8 | Indico: Missing access check in legacy session export API |
| CVE-2026-107394 | IN indico indico | 6.8 | Oct 8 | Indico: Incomplete Server-Side Request Forgery (SSRF) check |
| CVE-2026-33046 | IN indico indico | 8.8 | Mar 23 | Indico discloses local files resulting in Remote Code Execution through LaTeX injection |
| CVE-2026-28352 | IN indico indico | 6.5 | Feb 27 | Indico missing access check in event series management API |
| CVE-2026-25739 | IN indico indico | 5.4 | Feb 19 | Indico affected by Cross-Site-Scripting via material uploads |
| CVE-2026-25738 | IN indico indico | 4.3 | Feb 19 | Indico has Server-Side Request Forgery (SSRF) in multiple places |
| CVE-2025-59035 | IN indico indico | 5.4 | Sep 10 | Indico vulnerable to Cross-Site Scripting via LaTeX math code |
| CVE-2025-59034 | IN indico indico | 4.3 | Sep 10 | Indico may disclose unauthorized user details access via legacy API |
| CVE-2025-53640 | IN indico indico | 6.5 | Jul 14 | Indico vulnerable to user enumeration via API endpoint |
| CVE-2024-45399 | IN indico indico | 6.1 | Sep 4 | Indico has a Cross-Site-Scripting during account creation |