B3log 漏洞

时间轴

类型

Not Defined11

产品

b3log Symphony9
B3log Wide1
b3log Wide1

修正

Official Fix4
Temporary Fix0
Workaround0
Unavailable0
Not Defined7

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined11

访问向量

Not Defined0
Physical0
Local0
Adjacent1
Network10

身份验证

Not Defined0
High0
Low2
None9

用户交互

Not Defined0
Required8
None3

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤66
≤70
≤82
≤91
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤55
≤63
≤70
≤82
≤91
≤100

VulDB

≤10
≤20
≤30
≤41
≤57
≤61
≤70
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤76
≤81
≤90
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k2
<2k9
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k11
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (2): Symphony (9), Wide (2)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2023-04-047.67.6B3log Wide Symbolic Links 目录遍历未知Not DefinedNot Defined0.001100.02CVE-2020-19279
2019-10-105.25.1b3log Symphony HTTP Header 跨网站脚本未知Not DefinedOfficial Fix0.000870.02CVE-2019-17488
2019-07-187.47.2b3log Wide 权限升级未知Not DefinedOfficial Fix0.004140.00CVE-2019-13915
2019-02-255.45.3b3log Symphony SettingsProcessor.java 跨网站脚本未知Not DefinedOfficial Fix0.000700.03CVE-2019-9142
2018-04-278.58.5b3log Symphony upload 权限升级未知Not DefinedNot Defined0.004900.04CVE-2018-10469
2017-11-275.25.0b3log Symphony article 跨网站脚本未知Not DefinedNot Defined0.000880.03CVE-2017-16956
2017-11-185.25.0b3log Symphony JSON Object avatar 跨网站脚本未知Not DefinedNot Defined0.000750.03CVE-2017-16881
2017-11-154.44.3b3log Symphony Admin Console AdminProcessor.java 跨网站脚本未知Not DefinedNot Defined0.000560.00CVE-2017-16821
2017-05-105.25.0b3log Symphony content.blueprintssections.php 跨网站脚本未知Not DefinedOfficial Fix0.000790.01CVE-2017-8876
2017-03-275.25.2b3log Symphony 跨网站脚本未知Not DefinedNot Defined0.000590.00CVE-2017-6067

1 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 1 results.

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!