https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-2565.htmlhttps://patchthecve.com/cve/CVE-2024-2565.htmlWed, 17 Jun 2026 07:24:47 +0000MEDIUM 6.3: A vulnerability was found in PandaXGO PandaX up to 20240310. It has been classified as critical. Affected is an unknown function of the file /apps/system/router/upload.go of the component File Extension Handler. The manipulation of the argument file leads to unrestricted upload. It is possible to lahttps://patchthecve.com/cve/CVE-2024-2564.htmlhttps://patchthecve.com/cve/CVE-2024-2564.htmlWed, 17 Jun 2026 07:24:47 +0000MEDIUM 6.3: A vulnerability was found in PandaXGO PandaX up to 20240310 and classified as critical. This issue affects the function ExportUser of the file /apps/system/api/user.go. The manipulation of the argument filename leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit https://patchthecve.com/cve/CVE-2024-2563.htmlhttps://patchthecve.com/cve/CVE-2024-2563.htmlWed, 17 Jun 2026 07:24:47 +0000MEDIUM 5.4: A vulnerability has been found in PandaXGO PandaX up to 20240310 and classified as critical. This vulnerability affects the function DeleteImage of the file /apps/system/router/upload.go. The manipulation of the argument fileName with the input ../../../../../../../../../tmp/1.txt leads to path travhttps://patchthecve.com/cve/CVE-2024-2562.htmlhttps://patchthecve.com/cve/CVE-2024-2562.htmlWed, 17 Jun 2026 07:24:47 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in PandaXGO PandaX up to 20240310. This affects the function InsertRole of the file /apps/system/services/role_menu.go. The manipulation of the argument roleKey leads to sql injection. It is possible to initiate the attack remotely. The ex