CVE-2024-33865 - An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/

CVE-2024-33865

Summary

An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/{GUID] endpoints.

References

https://www.linqi.de/de-DE/blog.html
https://linqi.help/Updates/en#/SecurityUpdates

Vulnerable Configurations

CVSS

Base:	None
Impact:
Exploitability:

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

04-09-2024 - 20:35

Published

14-05-2024 - 16:17

Last modified

04-09-2024 - 20:35