← Back

Open Falcon

open-falcon

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Falcon Plus
falcon-plus
1 CVE
Dashboard
dashboard
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-27523
1Open Falcon
1Dashboard
Jun 17, 2026
Aug 11, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sensitive information via crafted POST request to register interface.
CVE-2022-26245
1Open Falcon
1Falcon Plus
Jun 17, 2026
Mar 27, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go.