https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-45919.htmlhttps://patchthecve.com/cve/CVE-2024-45919.htmlWed, 17 Jun 2026 07:55:02 +0000MEDIUM 6.5: A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By manipulating the Request ID and Action Type parameters in /AssignToMe/SetAction, an attacker can bypass approval workflows leading to unauthorized access to sensitive information or https://patchthecve.com/cve/CVE-2024-45920.htmlhttps://patchthecve.com/cve/CVE-2024-45920.htmlWed, 17 Jun 2026 07:55:02 +0000MEDIUM 5.4: A Stored Cross-Site Scripting (XSS) vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts into the application. This issue arises due to insufficient input validation and sanitization in "Intrest" feature.https://patchthecve.com/cve/CVE-2024-44860.htmlhttps://patchthecve.com/cve/CVE-2024-44860.htmlWed, 17 Jun 2026 07:53:11 +0000HIGH 7.5: An information disclosure vulnerability in the /Letter/PrintQr/ endpoint of Solvait v24.4.2 allows attackers to access sensitive data via a crafted request.