https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-33868.htmlhttps://patchthecve.com/cve/CVE-2024-33868.htmlWed, 17 Jun 2026 07:32:28 +0000CRITICAL 9.8: An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection.https://patchthecve.com/cve/CVE-2024-33867.htmlhttps://patchthecve.com/cve/CVE-2024-33867.htmlWed, 17 Jun 2026 07:32:28 +0000MEDIUM 4.8: An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt.https://patchthecve.com/cve/CVE-2024-33866.htmlhttps://patchthecve.com/cve/CVE-2024-33866.htmlWed, 17 Jun 2026 07:32:27 +0000MEDIUM 5.5: An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/{GUID] XSS.https://patchthecve.com/cve/CVE-2024-33865.htmlhttps://patchthecve.com/cve/CVE-2024-33865.htmlWed, 17 Jun 2026 07:32:27 +0000HIGH 7.5: An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/{GUID] endpoints.https://patchthecve.com/cve/CVE-2024-33864.htmlhttps://patchthecve.com/cve/CVE-2024-33864.htmlWed, 17 Jun 2026 07:32:27 +0000MEDIUM 5.9: An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in process creation, file inclusion, and PDF document generation via malicious JavaScript.https://patchthecve.com/cve/CVE-2024-33863.htmlhttps://patchthecve.com/cve/CVE-2024-33863.htmlWed, 17 Jun 2026 07:32:27 +0000CRITICAL 9.8: An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion.