Product by Avo-hq

    Avo

    8 known vulnerabilities in Avo (Avo-hq), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Avo (Avo-hq)
    HighCVE-2023-34102

    Possible unsafe reflection / partial denial of service in avo

    also in 1 other product

    		8.3
    CriticalCVE-2026-55518

    Avo: Authorization Bypass Through User-Controlled Key

    		9.6
    MediumCVE-2026-53769

    Avo: Missing Authorization

    		6.5
    HighCVE-2026-42205

    Avo: Broken Access Control: Unauthorized Execution of Arbitrary Action Classes Across Resources

    		8.8
    HighCVE-2024-22191

    Stored cross-site scripting (XSS) in `key_value` field in Avo

    also in 1 other product

    		7.3
    MediumCVE-2024-22411

    Cross site scripting in Action messages on Avo

    also in 1 other product

    		6.5
    HighCVE-2023-34103

    Stored XSS (Cross Site Scripting) in html content based fields of avo

    also in 1 other product

    		7.3
    MediumCVE-2026-33209

    Avo has a XSS vulnerability on `return_to` param

    also in 1 other product

    		6.1

    News

    All products by Avo-hq