← Back

Liveconfig

liveconfig

Vendor: Liveconfig • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Liveconfig
1Liveconfig
Jun 17, 2026
Feb 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Directory Traversal Vulnerability in LiveConfig before v.2.5.2 allows a remote attacker to obtain sensitive information via a crafted request to the /static/ endpoint.
1Liveconfig
1Liveconfig
Jun 17, 2026
Feb 18, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A Path Traversal vulnerability for a log file in LiveConfig 2.12.2 allows authenticated attackers to read files on the underlying server.
1Liveconfig
1Liveconfig
Jun 17, 2026
Feb 18, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
A Stored XSS issue exists in the admin/users user administration form in LiveConfig 2.12.2.