Vulnerabilities (CVE)

Filtered by vendor Emqx Subscribe
Filtered by product Emqx
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-37781 1 Emqx 1 Emqx 2024-11-21 N/A 6.5 MEDIUM
An issue in the emqx_sn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted .txt file.
CVE-2021-46434 1 Emqx 1 Emqx 2024-11-21 5.0 MEDIUM 5.3 MEDIUM
** UNSUPPORTED WHEN ASSIGNED ** EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depending on whether the account is correct, that allowed an attacker to determine if a given username was valid.