9001 records
12 published records for vendor 9001.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 91.7%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-552 Files or Directories Accessible to External Parties1
- CWE-863 Incorrect Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAll records
12 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
43Plan | CVE-2023-37474Proof of concept | Path traversal in copyparty9001 · copyparty · CWE-22 | High7.5 | — | 44.9% | Jul 14, 2023 |
31Monitor | CVE-2023-41471No exploit | Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the 9001 · copyparty · CWE-79 | High7.8 | — | 0.2% | Aug 29, 2025 |
30Monitor | CVE-2025-54796No exploit | Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page9001 · copyparty · CWE-400 | High7.5 | — | 0.4% | Aug 1, 2025 |
27Monitor | CVE-2023-38501Proof of concept | copyparty vulnerable to reflected cross-site scripting via k304 parameter9001 · copyparty · CWE-79 | Medium6.1 | — | 9.2% | Jul 25, 2023 |
25Monitor | CVE-2025-54589Proof of concept | copyparty Reflected XSS via Filter Parameter9001 · copyparty · CWE-79 | Medium6.1 | — | 2.3% | Jul 31, 2025 |
24Monitor | CVE-2025-54423No exploit | copyparty has a DOM-Based XSS vulnerability when displaying multimedia metadata9001 · copyparty · CWE-79 | Medium6.1 | — | 0.4% | Jul 28, 2025 |
24Monitor | CVE-2025-27145No exploit | copyparty renders unsanitized filenames as HTML when user uploads empty files9001 · copyparty · CWE-79 | Medium6.1 | — | 0.4% | Feb 24, 2025 |
24Monitor | CVE-2026-27948No exploit | Copyparty vulnerable to eflected cross-site scripting via setck parameter9001 · copyparty · CWE-79 | Medium6.1 | — | 0.1% | Feb 25, 2026 |
21Monitor | CVE-2026-30974No exploit | Copyparty volflag `nohtml` did not block javascript in svg files9001 · copyparty · CWE-79 | Medium5.4 | — | 0.3% | Mar 10, 2026 |
21Monitor | CVE-2025-58753No exploit | copyparty: Sharing a single file does not fully restrict access to other files in source folder9001 · copyparty · CWE-552 | Medium5.3 | — | 0.3% | Sep 9, 2025 |
17Monitor | CVE-2026-32109No exploit | Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`9001 · copyparty · CWE-79 | Medium4.4 | — | 0.1% | Mar 11, 2026 |
9Monitor | CVE-2026-32108No exploit | Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access9001 · copyparty · CWE-863 | Low2.3 | — | 0.3% | Mar 11, 2026 |
- CVE-2023-3747443Plan
Path traversal in copyparty
HighCVSS 7.5Proof of conceptEPSS 44%9001 · copypartyJul 14, 2023
- CVE-2023-4147131Monitor
Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the
HighCVSS 7.8No exploitEPSS 0%9001 · copypartyAug 29, 2025
- CVE-2025-5479630Monitor
Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page
HighCVSS 7.5No exploitEPSS 0%9001 · copypartyAug 1, 2025
- CVE-2023-3850127Monitor
copyparty vulnerable to reflected cross-site scripting via k304 parameter
MediumCVSS 6.1Proof of conceptEPSS 9%9001 · copypartyJul 25, 2023
- CVE-2025-5458925Monitor
copyparty Reflected XSS via Filter Parameter
MediumCVSS 6.1Proof of conceptEPSS 2%9001 · copypartyJul 31, 2025
- CVE-2025-5442324Monitor
copyparty has a DOM-Based XSS vulnerability when displaying multimedia metadata
MediumCVSS 6.1No exploitEPSS 0%9001 · copypartyJul 28, 2025
- CVE-2025-2714524Monitor
copyparty renders unsanitized filenames as HTML when user uploads empty files
MediumCVSS 6.1No exploitEPSS 0%9001 · copypartyFeb 24, 2025
- CVE-2026-2794824Monitor
Copyparty vulnerable to eflected cross-site scripting via setck parameter
MediumCVSS 6.1No exploitEPSS 0%9001 · copypartyFeb 25, 2026
- CVE-2026-3097421Monitor
Copyparty volflag `nohtml` did not block javascript in svg files
MediumCVSS 5.4No exploitEPSS 0%9001 · copypartyMar 10, 2026
- CVE-2025-5875321Monitor
copyparty: Sharing a single file does not fully restrict access to other files in source folder
MediumCVSS 5.3No exploitEPSS 0%9001 · copypartySep 9, 2025
- CVE-2026-3210917Monitor
Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`
MediumCVSS 4.4No exploitEPSS 0%9001 · copypartyMar 11, 2026
- CVE-2026-321089Monitor
Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access
LowCVSS 2.3No exploitEPSS 0%9001 · copypartyMar 11, 2026