Iindico

Products

Exploited and recent CVEs

• CVE-2026-108388 Low 3.5 Indico legacy contribution export cache poisoning discloses restricted metadata 0.3%
• CVE-2026-107397 Medium 4.4 Indico: Cross-Site-Scripting in minutes editor 0.2%
• CVE-2026-107396 Medium 5.4 Indico: Cross-Site-Scripting in link fields 0.2%
• CVE-2026-107395 Medium 4.3 Indico: Missing access check in legacy session export API 0.2%
• CVE-2026-107394 Medium 6.8 Indico: Incomplete Server-Side Request Forgery (SSRF) check 0.3%
• CVE-2026-33046 High 7.7 Indico discloses local files resulting in Remote Code Execution through LaTeX injection 0.8%
• CVE-2026-28352 Medium 6.5 Indico missing access check in event series management API 0.3%
• CVE-2026-25739 Medium 5.4 Indico affected by Cross-Site-Scripting via material uploads 0.2%
• CVE-2026-25738 Medium 6.9 Indico has Server-Side Request Forgery (SSRF) in multiple places 0.3%
• CVE-2025-59035 Medium 4.6 Indico vulnerable to Cross-Site Scripting via LaTeX math code 0.2%
• CVE-2025-59034 Medium 4.3 Indico may disclose unauthorized user details access via legacy API 0.3%
• CVE-2025-53640 Medium 5.3 Indico vulnerable to user enumeration via API endpoint 0.7%
• CVE-2024-45399 Medium 4.3 Indico has a Cross-Site-Scripting during account creation 0.4%
• CVE-2023-37901 Medium 5.4 Cross-Site-Scripting via confirmation prompts 0.5%