Flarum Luki w zabezpieczeniach

Oś czasu

Wersja

1.0	2
1.1	2
1.2	2
1.3	2
1.4	2

Przeciwdziałanie

Official Fix	11
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	0

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	11

Wektor dostępu

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	11

Uwierzytelnianie

Not Defined	0
High	1
Low	6
None	4

Interakcja z użytkownikiem

Not Defined	0
Required	4
None	7

C3BM Index

Ostatni rok

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	1
≤6	5
≤7	2
≤8	1
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	1
≤6	5
≤7	2
≤8	1
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	6
≤6	1
≤7	1
≤8	1
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	3
≤6	2
≤7	0
≤8	1
≤9	1
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	1
≤5	0
≤6	0
≤7	2
≤8	3
≤9	1
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	2
<2k	9
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	11
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (24): 0.1.0-beta, 0.1.0-beta.1, 0.1.0-beta.2, 0.1.0-beta.3, 0.1.0-beta.4, 0.1.0-beta.5, 0.1.0-beta.6, 0.1.0-beta.7, 0.1.0-beta.8, 1, 1.0, 1.0.1, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.8, 1.8.1, 1.8.2, 1.8.3, 1.8.4

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2024-01-06	5.8	5.8	Flarum logout Redirect	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2024-21641
2023-08-17	6.7	6.5	Flarum privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-40033
2023-03-11	5.4	5.3	flarum directory traversal	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-27577
2023-01-11	5.4	5.4	Flarum Post Mention privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-22487
2023-01-11	5.5	5.4	Flarum Notification information disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-22488
2023-01-11	3.9	3.8	flarum Reply privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-22489
2022-11-19	6.0	5.9	Flarum Page Title System cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-41938
2021-06-08	4.3	4.1	Flarum Translation System cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-32671
2021-01-27	3.5	3.5	Flarum Sticky Extension cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-21283
2019-07-07	6.5	6.4	Flarum cross site request forgery	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-13183

1 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 1 results.

◂ PoprzedniPrzeglądKolejny ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!