Onedev Schwachstellen

Zeitverlauf

Version

4.0.0	8
4.0.1	8
4.0.2	8
7.0	6
7.1	6

Massnahmen

Official Fix	18
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	0

Ausnutzbarkeit

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	18

Zugriffsart

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	18

Authentisierung

Not Defined	0
High	0
Low	14
None	4

Benutzeraktivität

Not Defined	0
Required	2
None	16

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	0
≤7	2
≤8	8
≤9	2
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	2
≤4	0
≤5	2
≤6	0
≤7	4
≤8	6
≤9	2
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	4
≤5	2
≤6	2
≤7	6
≤8	2
≤9	2
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	8
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	2
≤9	2
≤10	2

Hersteller

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	2
<2k	6
<5k	10
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit heute

<1k	18
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploitmarktvolumen

🔴 CTI Aktivitäten

Affected Versions (20): 4, 4.0.1, 4.0.2, 4.4, 4.4.1, 7.0, 7.1, 7.2, 7.4.14, 7.9, 7.9.1, 7.9.2, 7.9.3, 7.9.4, 7.9.5, 7.9.6, 7.9.7, 7.9.8, 7.9.9, 7.9.11

Veröffentlicht	Base	Temp	Schwachstelle	0day	Heute	Aus	Mas	CTI	CVE
08.02.2023	7.1	7.0	Onedev Password Reset schwache Verschlüsselung	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-24828
15.09.2022	7.1	7.0	Onedev JAR File lib Directory Traversal	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-38301
14.09.2022	8.1	8.1	Onedev HTTP Header git-prereceive-callback schwache Authentisierung	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2022-39205
14.09.2022	4.4	4.4	Onedev Web UI Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-39207
14.09.2022	6.4	6.3	Onedev Project File erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-39208
14.09.2022	9.3	9.1	Onedev Docker Socket docker.sock erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.01	CVE-2022-39206
02.06.2021	3.1	3.0	OneDev LDAP External Authentication erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-32651
16.01.2021	7.5	7.2	OneDev KubernetesResource REST Endpoint Directory Traversal	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-21251
16.01.2021	5.4	5.1	OneDev XML Document XmlBuildSpecMigrator.migrate Information Disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-21250
16.01.2021	7.5	7.2	OneDev YAML Parser erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-21249

7 weitere Einträge werden nicht mehr angezeigt

🔒 Login Required

You need to signup and login to see more of the remaining 7 results.

◂ ZurückÜbersichtWeiter ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!