VendorsDepomochartbrewall versions
Vulnerabilities

Depomo Chartbrew

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2026-27005
Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables)
Published 2026-03-06 · Analyzed
9.8EPSS 0.007
CVE-2026-30232
Chartbrew has SSRF in API Data Connection - No IP Validation on User-Provided URLs
Published 2026-04-10 · Analyzed
9.6EPSS 0.004
CVE-2026-25888
Chartbrew: Remote Code Execution (RCE) via Vulnerable API
Published 2026-03-06 · Analyzed
8.8EPSS 0.009
CVE-2026-27603
Chartbrew: Unauthenticated Chart Filter Endpoint: POST /project/:project_id/chart/:chart_id/filter missing verifyToken + checkPermissions
Published 2026-03-06 · Analyzed
8.7EPSS 0.005
CVE-2026-32252
Chartbrew Cross-Tenant Template Export and Secret Disclosure in `GET /team/:team_id/template/generate/:project_id`
Published 2026-04-10 · Analyzed
7.7EPSS 0.004
CVE-2026-25887
Chartbrew: Remote Code Execution (RCE) via MongoDB Dataset Query
Published 2026-03-06 · Analyzed
7.2EPSS 0.009
CVE-2026-25877
Chartbrew: Insecure Direct Object Reference (IDOR) in Chart Operations
Published 2026-03-06 · Analyzed
6.5EPSS 0.004
CVE-2026-27605
Chartbrew: Stored Cross-Site Scripting (XSS) via File Upload API
Published 2026-03-06 · Analyzed
6.3EPSS 0.003