Modx 漏洞

时间轴

类型

Content Management System62

产品

MODX Revolution30
MODX CMS26
MODX Evolution6

修正

Official Fix34
Temporary Fix0
Workaround0
Unavailable0
Not Defined28

易受攻击性

High2
Functional0
Proof-of-Concept20
Unproven0
Not Defined40

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network62

身份验证

Not Defined0
High2
Low20
None40

用户交互

Not Defined0
Required34
None28

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤48
≤520
≤618
≤76
≤810
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤410
≤520
≤616
≤710
≤86
≤90
≤100

VulDB

≤10
≤20
≤30
≤414
≤520
≤612
≤78
≤88
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤68
≤76
≤82
≤94
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k6
<2k40
<5k16
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k62
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (4): CMS (19), Evolution (4), Revolution (38), Revolution Gallery (1)

Link to Vendor Website: https://modx.com/

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2022-02-274.74.6MODX Revolution 权限升级Content Management SystemNot DefinedNot Defined0.013460.04CVE-2022-26149
2021-11-017.37.3MODX CMS modRestServiceRequest XML External EntityContent Management SystemProof-of-ConceptNot Defined0.001910.00CVE-2020-25911
2019-07-248.58.4MODX Revolution Access Control connector.php 权限升级Content Management SystemNot DefinedOfficial Fix0.014510.02CVE-2019-1010178
2019-07-237.47.4MODX Revolution Gallery File Upload connector.php phpthumb 权限升级Photo Gallery SoftwareNot DefinedNot Defined0.001050.02CVE-2019-1010123
2019-02-064.74.7MODX Revolution User Settings 跨网站脚本Content Management SystemNot DefinedNot Defined0.000540.05CVE-2018-20758
2019-02-065.45.4MODX Revolution User Field 跨网站脚本Content Management SystemNot DefinedNot Defined0.000870.02CVE-2018-20757
2019-02-065.45.4MODX Revolution Document Resource 跨网站脚本Content Management SystemNot DefinedNot Defined0.000870.02CVE-2018-20756
2019-02-065.45.4MODX Revolution User Photo 跨网站脚本Content Management SystemNot DefinedNot Defined0.000870.03CVE-2018-20755
2018-09-264.44.4MODX Revolution Create New Media Source Stored 跨网站脚本Content Management SystemNot DefinedNot Defined0.000470.02CVE-2018-17556
2018-07-137.06.7MODX Revolution modmanagerrequest.class.php 目录遍历Content Management SystemNot DefinedOfficial Fix0.000780.07CVE-2018-1000208

52 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 52 results.

◂ 上一步一览下一步 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!