9001 kayıtları
9001 üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %91,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-552 Files or Directories Accessible to External Parties1
- CWE-863 Incorrect Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
43Planlayın | CVE-2023-37474Kavram kanıtı | Path traversal in copyparty9001 · copyparty · CWE-22 | Yüksek7,5 | — | %44,9 | 14 Tem 2023 |
31İzleyin | CVE-2023-41471İstismar yok | Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the 9001 · copyparty · CWE-79 | Yüksek7,8 | — | %0,3 | 29 Ağu 2025 |
30İzleyin | CVE-2025-54796İstismar yok | Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page9001 · copyparty · CWE-400 | Yüksek7,5 | — | %0,4 | 1 Ağu 2025 |
27İzleyin | CVE-2023-38501Kavram kanıtı | copyparty vulnerable to reflected cross-site scripting via k304 parameter9001 · copyparty · CWE-79 | Orta6,1 | — | %9,2 | 25 Tem 2023 |
25İzleyin | CVE-2025-54589Kavram kanıtı | copyparty Reflected XSS via Filter Parameter9001 · copyparty · CWE-79 | Orta6,1 | — | %2,4 | 31 Tem 2025 |
24İzleyin | CVE-2025-27145İstismar yok | copyparty renders unsanitized filenames as HTML when user uploads empty files9001 · copyparty · CWE-79 | Orta6,1 | — | %0,5 | 24 Şub 2025 |
24İzleyin | CVE-2025-54423İstismar yok | copyparty has a DOM-Based XSS vulnerability when displaying multimedia metadata9001 · copyparty · CWE-79 | Orta6,1 | — | %0,4 | 28 Tem 2025 |
24İzleyin | CVE-2026-27948İstismar yok | Copyparty vulnerable to eflected cross-site scripting via setck parameter9001 · copyparty · CWE-79 | Orta6,1 | — | %0,3 | 25 Şub 2026 |
21İzleyin | CVE-2025-58753İstismar yok | copyparty: Sharing a single file does not fully restrict access to other files in source folder9001 · copyparty · CWE-552 | Orta5,3 | — | %0,4 | 9 Eyl 2025 |
21İzleyin | CVE-2026-30974İstismar yok | Copyparty volflag `nohtml` did not block javascript in svg files9001 · copyparty · CWE-79 | Orta5,4 | — | %0,3 | 10 Mar 2026 |
17İzleyin | CVE-2026-32109İstismar yok | Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`9001 · copyparty · CWE-79 | Orta4,4 | — | %0,2 | 11 Mar 2026 |
9İzleyin | CVE-2026-32108İstismar yok | Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access9001 · copyparty · CWE-863 | Düşük2,3 | — | %0,3 | 11 Mar 2026 |
- CVE-2023-3747443Planlayın
Path traversal in copyparty
YüksekCVSS 7,5Kavram kanıtıEPSS %459001 · copyparty14 Tem 2023
- CVE-2023-4147131İzleyin
Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the
YüksekCVSS 7,8İstismar yokEPSS %09001 · copyparty29 Ağu 2025
- CVE-2025-5479630İzleyin
Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page
YüksekCVSS 7,5İstismar yokEPSS %09001 · copyparty1 Ağu 2025
- CVE-2023-3850127İzleyin
copyparty vulnerable to reflected cross-site scripting via k304 parameter
OrtaCVSS 6,1Kavram kanıtıEPSS %99001 · copyparty25 Tem 2023
- CVE-2025-5458925İzleyin
copyparty Reflected XSS via Filter Parameter
OrtaCVSS 6,1Kavram kanıtıEPSS %29001 · copyparty31 Tem 2025
- CVE-2025-2714524İzleyin
copyparty renders unsanitized filenames as HTML when user uploads empty files
OrtaCVSS 6,1İstismar yokEPSS %09001 · copyparty24 Şub 2025
- CVE-2025-5442324İzleyin
copyparty has a DOM-Based XSS vulnerability when displaying multimedia metadata
OrtaCVSS 6,1İstismar yokEPSS %09001 · copyparty28 Tem 2025
- CVE-2026-2794824İzleyin
Copyparty vulnerable to eflected cross-site scripting via setck parameter
OrtaCVSS 6,1İstismar yokEPSS %09001 · copyparty25 Şub 2026
- CVE-2025-5875321İzleyin
copyparty: Sharing a single file does not fully restrict access to other files in source folder
OrtaCVSS 5,3İstismar yokEPSS %09001 · copyparty9 Eyl 2025
- CVE-2026-3097421İzleyin
Copyparty volflag `nohtml` did not block javascript in svg files
OrtaCVSS 5,4İstismar yokEPSS %09001 · copyparty10 Mar 2026
- CVE-2026-3210917İzleyin
Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`
OrtaCVSS 4,4İstismar yokEPSS %09001 · copyparty11 Mar 2026
- CVE-2026-321089İzleyin
Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access
DüşükCVSS 2,3İstismar yokEPSS %09001 · copyparty11 Mar 2026