Requarks records

16 published records for vendor requarks.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 31.3%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

16 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2025-56643Proof of concept	Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out.requarks · wiki.js · CWE-613 Pre-auth	Critical9.1	—	0.4%	Nov 18, 2025
34Monitor	CVE-2026-44224No exploit	Wiki.js: Privilege Escalation via Missing Group Validation in users.updaterequarks · wiki.js · CWE-269	High8.6	—	0.6%	May 12, 2026
31Monitor	CVE-2021-43800No exploit	Asset directory traversal with some storage modules on Windowsrequarks · wiki.js · CWE-22 Pre-auth Path traversal	High7.5	—	1.8%	Dec 6, 2021
31Monitor	CVE-2020-15236No exploit	Directory Traversal in Wiki.jsrequarks · wiki.js · CWE-22 Pre-auth Path traversal	High7.5	—	1.8%	Oct 5, 2020
29Monitor	CVE-2022-1681No exploit	Authentication Bypass Using an Alternate Path or Channel in requarks/wikirequarks · wiki.js · CWE-288 Auth bypass	High7.2	—	1.9%	May 12, 2022
28Monitor	CVE-2024-34710No exploit	Wiki.js Stored XSS through Client Side Template Injectionrequarks · wiki · CWE-1336 RCE XSS SSTI	High7.1	—	0.4%	May 20, 2024
26Monitor	CVE-2022-23654No exploit	Improper write access check in Requarks/wikirequarks · wiki.js · CWE-287 Auth bypass	Medium6.5	—	0.7%	Feb 22, 2022
24Monitor	CVE-2020-4052No exploit	Stored XSS through template injection in Wiki.jsrequarks · wiki.js · CWE-79 Pre-auth XSS SSTI	Medium6.1	—	0.8%	Jun 16, 2020
21Monitor	CVE-2021-43855No exploit	Stored XSS via SVG in Requarks/wikirequarks · wiki.js · CWE-79 XSS	Medium5.4	—	0.9%	Dec 27, 2021
21Monitor	CVE-2021-43856No exploit	Stored XSS in non-image uploads in Requarks/wikirequarks · wiki.js · CWE-79 XSS	Medium5.4	—	0.9%	Dec 27, 2021
21Monitor	CVE-2021-21383No exploit	Wiki.js an open-source wiki app built on Node.js.requarks · wiki.js · CWE-79 XSS	Medium5.4	—	0.9%	Mar 18, 2021
21Monitor	CVE-2020-15274No exploit	Stored XSS via search result in Wiki.jsrequarks · wiki.js · CWE-79 XSS	Medium5.4	—	0.8%	Oct 26, 2020
21Monitor	CVE-2021-43842No exploit	Stored XSS via SVG file upload in Wiki.jsrequarks · wiki.js · CWE-79 XSS	Medium5.4	—	0.7%	Dec 20, 2021
21Monitor	CVE-2021-25993No exploit	Requarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editorrequarks · wiki.js · CWE-79 XSS	Medium5.4	—	0.6%	Dec 29, 2021
19Monitor	CVE-2020-11051No exploit	In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor.requarks · wiki.js · CWE-79 XSS	Medium4.8	—	0.6%	May 5, 2020
17Monitor	CVE-2024-45298No exploit	Disabled user can bypass lockout by requesting password reset in wiki.jsrequarks · wiki · CWE-670	Medium4.3	—	0.4%	Sep 18, 2024

CVE-2025-56643
36Monitor
Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out.
CriticalCVSS 9.1Proof of conceptEPSS 0%
- Pre-auth
requarks · wiki.jsNov 18, 2025
CVE-2026-44224
34Monitor
Wiki.js: Privilege Escalation via Missing Group Validation in users.update
HighCVSS 8.6No exploitEPSS 1%
requarks · wiki.jsMay 12, 2026
CVE-2021-43800
31Monitor
Asset directory traversal with some storage modules on Windows
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Path traversal
requarks · wiki.jsDec 6, 2021
CVE-2020-15236
31Monitor
Directory Traversal in Wiki.js
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Path traversal
requarks · wiki.jsOct 5, 2020
CVE-2022-1681
29Monitor
Authentication Bypass Using an Alternate Path or Channel in requarks/wiki
HighCVSS 7.2No exploitEPSS 2%
- Auth bypass
requarks · wiki.jsMay 12, 2022
CVE-2024-34710
28Monitor
Wiki.js Stored XSS through Client Side Template Injection
HighCVSS 7.1No exploitEPSS 0%
- RCE
- XSS
- SSTI
requarks · wikiMay 20, 2024
CVE-2022-23654
26Monitor
Improper write access check in Requarks/wiki
MediumCVSS 6.5No exploitEPSS 1%
- Auth bypass
requarks · wiki.jsFeb 22, 2022
CVE-2020-4052
24Monitor
Stored XSS through template injection in Wiki.js
MediumCVSS 6.1No exploitEPSS 1%
requarks · wiki.jsJun 16, 2020
CVE-2021-43855
21Monitor
Stored XSS via SVG in Requarks/wiki
MediumCVSS 5.4No exploitEPSS 1%
- XSS
requarks · wiki.jsDec 27, 2021
CVE-2021-43856
21Monitor
Stored XSS in non-image uploads in Requarks/wiki
MediumCVSS 5.4No exploitEPSS 1%
- XSS
requarks · wiki.jsDec 27, 2021
CVE-2021-21383
21Monitor
Wiki.js an open-source wiki app built on Node.js.
MediumCVSS 5.4No exploitEPSS 1%
- XSS
requarks · wiki.jsMar 18, 2021
CVE-2020-15274
21Monitor
Stored XSS via search result in Wiki.js
MediumCVSS 5.4No exploitEPSS 1%
- XSS
requarks · wiki.jsOct 26, 2020
CVE-2021-43842
21Monitor
Stored XSS via SVG file upload in Wiki.js
MediumCVSS 5.4No exploitEPSS 1%
- XSS
requarks · wiki.jsDec 20, 2021
CVE-2021-25993
21Monitor
Requarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editor
MediumCVSS 5.4No exploitEPSS 1%
- XSS
requarks · wiki.jsDec 29, 2021
CVE-2020-11051
19Monitor
In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
requarks · wiki.jsMay 5, 2020
CVE-2024-45298
17Monitor
Disabled user can bypass lockout by requesting password reset in wiki.js
MediumCVSS 4.3No exploitEPSS 0%
requarks · wikiSep 18, 2024