Praskla-Technology vulnerabilities
10 published CVEs name Praskla-Technology among the affected products.
- 10Published CVEs10 of them scored
- 10Last 12 monthspublished in the last year
- 4Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-25875
PlaciPy Admin Privilege Escalation via Trusted JWT Claims
Praskla-Technology · assessment-placipy
Critical9.3 - CVE-2026-25814
NoSQL Injection Risk via Unsanitized Query Parameters
Praskla-Technology · assessment-placipy
Critical9.3 - CVE-2026-25813
PlaciPy Exposes Sensitive Data via Application Logs
Praskla-Technology · assessment-placipy
High8.7 - CVE-2026-25812
PlaciPy is Missing CSRF Protection on State-Changing Endpoints
Praskla-Technology · assessment-placipy
Critical9.3 - CVE-2026-25811
PlaciPy Email Domain Trust Enables Cross-Tenant Data Access (Multi-Tenant Isolation Failure)
Praskla-Technology · assessment-placipy
Medium5.3 - CVE-2026-25809
PlaciPy Code Execution Allowed Without Assessment Active State Validation
Praskla-Technology · assessment-placipy
Medium5.3 - CVE-2026-25806
PlaciPy has Missing Authorization Checks on Student Management Endpoints (IDOR)
Praskla-Technology · assessment-placipy
Medium5.3 - CVE-2026-25810
PlaciPy is Missing Object-Level Authorization in student.submission.routes.ts
Praskla-Technology · assessment-placipy
Medium5.3 - CVE-2026-25876
PlaciPy is Missing Authorization on Assessment Results Endpoint
Praskla-Technology · assessment-placipy
Medium5.3 - CVE-2026-25753
PlaciPy has a Hard-Coded Default Password for All Student Accounts (Account Takeover)
Praskla-Technology · assessment-placipy
Critical9.3