LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-3813 - Vulnerability Analysis

MediumCVSS: 6.3

Last Updated: March 10, 2026

opencc JFlow - Injection

Published: March 9, 2026Updated: March 10, 2026PoC AvailableRemote Exploitable

Overview

opencc JFlow contains an injection vulnerability caused by manipulation in the Calculate function in src/main/java/bp/wf/httphandler/WF_CCForm.java, letting remote attackers perform injection attacks, exploit requires crafted input.

Severity & Score

Severity: Medium
CVSS Score: 6.3

Impact

Remote attackers can perform injection attacks, potentially leading to data manipulation or code execution.

Mitigation

Update to the latest version when available.

Details

CVE ID
CVE-2026-3813
Severity
Medium
CVSS Score
6.3
Type
undefined
Status
confirmed

CWE

  • CWE-74
  • CWE-77

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L