Craft 漏洞

时间轴

类型

Content Management System	44
Not Defined	2

产品

Craft CMS	41
The Digital Craft Atom CMS	3
Craft 360 Web Portal	2

修正

Official Fix	34
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	11

易受攻击性

High	0
Functional	0
Proof-of-Concept	3
Unproven	0
Not Defined	43

访问向量

Not Defined	0
Physical	0
Local	0
Adjacent	4
Network	42

身份验证

Not Defined	0
High	2
Low	32
None	12

用户交互

Not Defined	0
Required	26
None	20

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	10
≤5	12
≤6	13
≤7	8
≤8	2
≤9	1
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	10
≤5	15
≤6	11
≤7	7
≤8	2
≤9	1
≤10	0

VulDB

≤1	0
≤2	0
≤3	1
≤4	21
≤5	10
≤6	6
≤7	6
≤8	2
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	13
≤7	6
≤8	5
≤9	2
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	2
≤8	2
≤9	0
≤10	1

供应商

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

零日攻击

<1k	15
<2k	26
<5k	5
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

本日攻击

<1k	45
<2k	1
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

攻击市场容量

🔴 CTI 活动

Affected Products (3): 360 Web Portal (2), Atom CMS (3), CMS (41)

已发布	Base	Temp	漏洞	Prod	易	修正	EPSS	CTI	CVE
2024-01-30	4.4	4.4	Craft CMS User Creation 跨网站脚本	Content Management System	Not Defined	Official Fix	0.00049	0.00	CVE-2023-36259
2024-01-30	5.9	5.8	Craft CMS 拒绝服务	Content Management System	Not Defined	Official Fix	0.00092	0.02	CVE-2023-36260
2024-01-03	6.6	6.5	Craft CMS 权限升级	Content Management System	Not Defined	Official Fix	0.00073	0.04	CVE-2024-21622
2023-09-14	9.0	8.9	Craft CMS 权限升级	Content Management System	Not Defined	Official Fix	0.85479	0.04	CVE-2023-41892
2023-08-22	6.7	6.7	Craft CMS validatePath 权限升级	Content Management System	Not Defined	Official Fix	0.00126	0.02	CVE-2023-40035
2023-06-20	4.8	4.8	Craft CMS 跨网站脚本	Content Management System	Not Defined	Not Defined	0.00046	0.00	CVE-2023-33495
2023-06-13	6.7	6.6	Craft CMS Template 权限升级	Content Management System	Not Defined	Official Fix	0.00140	0.02	CVE-2023-30179
2023-05-26	4.4	4.4	Craft CMS Entries Page 跨网站脚本	Content Management System	Not Defined	Official Fix	0.00045	0.00	CVE-2023-2817
2023-05-26	3.5	3.4	Craft CMS Quick Post Widget Error Message 跨网站脚本	Content Management System	Not Defined	Official Fix	0.00051	0.00	CVE-2023-33194
2023-05-26	3.5	3.4	Craft CMS RSS Feed Widget 跨网站脚本	Content Management System	Not Defined	Official Fix	0.00052	0.00	CVE-2023-33195

36 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 36 results.

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!