Onedev 漏洞

时间轴

版本

4.0.0	14
4.0.1	14
4.0.2	14
7.0	4
7.1	4

修正

Official Fix	18
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	0

易受攻击性

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	18

访问向量

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	18

身份验证

Not Defined	0
High	0
Low	10
None	8

用户交互

Not Defined	0
Required	2
None	16

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	2
≤7	0
≤8	6
≤9	8
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	2
≤7	0
≤8	6
≤9	8
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	2
≤7	6
≤8	6
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	2
≤8	0
≤9	6
≤10	8

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	0
≤9	2
≤10	0

供应商

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

零日攻击

<1k	2
<2k	10
<5k	6
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

本日攻击

<1k	18
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

攻击市场容量

🔴 CTI 活动

Affected Versions (20): 4, 4.0.1, 4.0.2, 4.4, 4.4.1, 7.0, 7.1, 7.2, 7.4.14, 7.9, 7.9.1, 7.9.2, 7.9.3, 7.9.4, 7.9.5, 7.9.6, 7.9.7, 7.9.8, 7.9.9, 7.9.11

已发布	Base	Temp	漏洞	0day	今天	易	修正	CTI	CVE
2023-02-08	7.1	7.0	Onedev Password Reset 弱加密	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2023-24828
2022-09-15	7.1	7.0	Onedev JAR File lib 目录遍历	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-38301
2022-09-14	8.1	8.1	Onedev HTTP Header git-prereceive-callback 弱身份验证	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2022-39205
2022-09-14	4.4	4.4	Onedev Web UI 跨网站脚本	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-39207
2022-09-14	6.4	6.3	Onedev Project File 权限升级	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-39208
2022-09-14	9.3	9.1	Onedev Docker Socket docker.sock 权限升级	$0-$5k	$0-$5k	Not Defined	Official Fix	0.01	CVE-2022-39206
2021-06-02	3.1	3.0	OneDev LDAP External Authentication 权限升级	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-32651
2021-01-16	7.5	7.2	OneDev KubernetesResource REST Endpoint 目录遍历	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-21251
2021-01-16	5.4	5.1	OneDev XML Document XmlBuildSpecMigrator.migrate 信息公开	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-21250
2021-01-16	7.5	7.2	OneDev YAML Parser 权限升级	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-21249

7 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 7 results.

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!