Robuta

https://advisories.gitlab.com/composer/funadmin/funadmin/CVE-2026-2896/ funadmin has Incorrect Privilege Assignment in its Configuration Handler | GitLab Advisory Database... CVE-2026-2896 funadmin has Incorrect Privilege Assignment in its Configuration Handler: A weakness has been identified in funadmin up to 7.1.0-rc4. This... https://advisories.gitlab.com/composer/funadmin/funadmin/CVE-2026-2897/ funadmin: XSS through Value argument in Backend Interface component | GitLab Advisory Database... CVE-2026-2897 funadmin: XSS through Value argument in Backend Interface component: A security vulnerability has been detected in funadmin up to 7.1.0-rc4. This... https://advisories.gitlab.com/composer/funadmin/funadmin/CVE-2024-48228/ Funadmin Cross-site Scripting vulnerability | GitLab Advisory Database (GLAD) CVE-2024-48228 Funadmin Cross-site Scripting vulnerability: An issue was found in funadmin 5.0.2. The selectfiles method in \backend\controller\sys\Attachh.php... cross site scriptingfunadminvulnerabilitygitlabadvisory https://advisories.gitlab.com/composer/funadmin/funadmin/CVE-2026-2898/ funadmin: Deserialization Vulnerability in Backend Endpoint via AuthCloudService getMember Function... CVE-2026-2898 funadmin: Deserialization Vulnerability in Backend Endpoint via AuthCloudService getMember Function: A vulnerability was detected in funadmin up... funadmindeserializationvulnerabilitybackendendpoint https://advisories.gitlab.com/pkg/composer/funadmin/funadmin/CVE-2024-48218/ https://advisories.gitlab.com/composer/funadmin/funadmin/CVE-2024-48218/ httpsadvisoriesgitlabcomposerfunadmin https://advisories.gitlab.com/composer/funadmin/funadmin/CVE-2024-48227/ Logic flaw in Funadmin | GitLab Advisory Database (GLAD) CVE-2024-48227 Logic flaw in Funadmin: Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of... logicflawfunadmingitlabadvisory https://advisories.gitlab.com/composer/funadmin/funadmin/CVE-2024-48218/ SQL injection in funadmin | GitLab Advisory Database (GLAD) CVE-2024-48218 SQL injection in funadmin: Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list. sql injectionfunadmingitlabadvisorydatabase https://advisories.gitlab.com/pkg/composer/funadmin/funadmin/CVE-2024-48227/ https://advisories.gitlab.com/composer/funadmin/funadmin/CVE-2024-48227/ httpsadvisoriesgitlabcomposerfunadmin