What’s Vulnerable › Products

OpenBoxes vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your OpenBoxes version is affected

Latest OpenBoxes vulnerabilities

• CVE-2024-14046 — OpenBoxes Document Upload Controller DocumentController.groovy DocumentController unrestricted upload (CVSS 6.3)
• CVE-2024-14045 — OpenBoxes Product Supplier Edit Controller RoleInterceptor.groovy improper authorization (CVSS 6.3)
• CVE-2026-19929 — OpenBoxes Template Processing DocumentController.groovy buildZebraTemplate special elements in template engine (CVSS 6.3)
• CVE-2026-19928 — OpenBoxes Role Interceptor RoleInterceptor.groovy needManager privileges management (CVSS 6.3)
• CVE-2026-19927 — OpenBoxes Product Upload Endpoint ProductController.groovy upload server-side request forgery (CVSS 6.3)