<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: easyadmin</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-5383: A vulnerability classified as problematic has been found in lakernote EasyAdmin up to 20240324</title><link>https://patchthecve.com/cve/CVE-2024-5383.html</link><guid>https://patchthecve.com/cve/CVE-2024-5383.html</guid><pubDate>Wed, 17 Jun 2026 08:15:50 +0000</pubDate><description>LOW 3.5: A vulnerability classified as problematic has been found in lakernote EasyAdmin up to 20240324. This affects an unknown part of the file /sys/file/upload. The manipulation of the argument file leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclos</description></item><item><title>CVE-2024-3081: A vulnerability was found in EasyCorp EasyAdmin up to 4.8.9</title><link>https://patchthecve.com/cve/CVE-2024-3081.html</link><guid>https://patchthecve.com/cve/CVE-2024-3081.html</guid><pubDate>Wed, 17 Jun 2026 07:43:16 +0000</pubDate><description>LOW 3.5: A vulnerability was found in EasyCorp EasyAdmin up to 4.8.9. It has been declared as problematic. Affected by this vulnerability is the function Autocomplete of the file assets/js/autocomplete.js of the component Autocomplete. The manipulation of the argument item leads to cross site scripting. The </description></item><item><title>CVE-2024-2828: A vulnerability, which was classified as critical, was found in lakernote EasyAdmin up to 20240315</title><link>https://patchthecve.com/cve/CVE-2024-2828.html</link><guid>https://patchthecve.com/cve/CVE-2024-2828.html</guid><pubDate>Wed, 17 Jun 2026 07:25:38 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, was found in lakernote EasyAdmin up to 20240315. Affected is the function thumbnail of the file src/main/java/com/laker/admin/module/sys/controller/IndexController.java. The manipulation of the argument url leads to server-side request forgery. It i</description></item><item><title>CVE-2024-2827: A vulnerability, which was classified as critical, has been found in lakernote EasyAdmin up to 20240315</title><link>https://patchthecve.com/cve/CVE-2024-2827.html</link><guid>https://patchthecve.com/cve/CVE-2024-2827.html</guid><pubDate>Wed, 17 Jun 2026 07:25:38 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in lakernote EasyAdmin up to 20240315. This issue affects some unknown processing of the file /ureport/designer/saveReportFile. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit h</description></item><item><title>CVE-2024-2826: A vulnerability classified as problematic was found in lakernote EasyAdmin up to 20240315</title><link>https://patchthecve.com/cve/CVE-2024-2826.html</link><guid>https://patchthecve.com/cve/CVE-2024-2826.html</guid><pubDate>Wed, 17 Jun 2026 07:25:37 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as problematic was found in lakernote EasyAdmin up to 20240315. This vulnerability affects unknown code of the file /ureport/designer/saveReportFile. The manipulation leads to xml external entity reference. The attack can be initiated remotely. The exploit has been disclos</description></item><item><title>CVE-2024-2825: A vulnerability classified as critical has been found in lakernote EasyAdmin up to 20240315</title><link>https://patchthecve.com/cve/CVE-2024-2825.html</link><guid>https://patchthecve.com/cve/CVE-2024-2825.html</guid><pubDate>Wed, 17 Jun 2026 07:25:37 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical has been found in lakernote EasyAdmin up to 20240315. This affects an unknown part of the file /ureport/designer/saveReportFile. The manipulation of the argument file leads to path traversal: &#x27;../filedir&#x27;. It is possible to initiate the attack remotely. The exp</description></item></channel></rss>