dootask kayıtları
dootask üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2025-55454İstismar yok | An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrardootask · dootask · CWE-434 | Yüksek8,8 | — | %0,7 | 22 Ağu 2025 |
24İzleyin | CVE-2026-29828İstismar yok | DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/<id> page via the input field projectDesc.dootask · dootask · CWE-79 | Orta6,1 | — | %0,3 | 20 Mar 2026 |
21İzleyin | CVE-2024-34906İstismar yok | An arbitrary file upload vulnerability in dootask v0.30.13 allows attackers to execute arbitrary code via uploading a crafted PDF file.dootask · dootask · CWE-79 | Orta5,4 | — | %0,4 | 15 May 2024 |
14İzleyin | CVE-2025-55455İstismar yok | DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext.dootask · dootask · CWE-434 | Düşük3,5 | — | %0,3 | 22 Ağu 2025 |
- CVE-2025-5545435İzleyin
An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrar
YüksekCVSS 8,8İstismar yokEPSS %1dootask · dootask22 Ağu 2025
- CVE-2026-2982824İzleyin
DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/<id> page via the input field projectDesc.
OrtaCVSS 6,1İstismar yokEPSS %0dootask · dootask20 Mar 2026
- CVE-2024-3490621İzleyin
An arbitrary file upload vulnerability in dootask v0.30.13 allows attackers to execute arbitrary code via uploading a crafted PDF file.
OrtaCVSS 5,4İstismar yokEPSS %0dootask · dootask15 May 2024
- CVE-2025-5545514İzleyin
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext.
DüşükCVSS 3,5İstismar yokEPSS %0dootask · dootask22 Ağu 2025