anji-plus kayıtları
anji-plus üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %10
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-502 Deserialization of Untrusted Data2
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
- CWE-290 Authentication Bypass by Spoofing1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
55Planlayın | CVE-2024-7314Kavram kanıtı | anji-plus AJ-Report Authentication Bypassanji-plus · report · CWE-288 | Kritik9,8 | — | %51,8 | 2 Ağu 2024 |
39İzleyin | CVE-2022-46973İstismar yok | Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.anji-plus · aj-report · CWE-918 | Kritik9,8 | — | %0,8 | 3 Mar 2023 |
36İzleyin | CVE-2022-42983İstismar yok | anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens.anji-plus · aj-report · CWE-290 | Yüksek8,8 | — | %1,7 | 17 Eki 2022 |
22İzleyin | CVE-2024-5355İstismar yok | anji-plus AJ-Report IGroovyHandler command injectionanji-plus · aj-report · CWE-77 | Orta5,3 | — | %3,2 | 26 May 2024 |
21İzleyin | CVE-2024-5356Kavram kanıtı | anji-plus AJ-Report testTransform;swagger-ui sql injectionanji-plus · aj-report · CWE-89 | Orta5,3 | — | %1,0 | 26 May 2024 |
21İzleyin | CVE-2024-5353İstismar yok | anji-plus AJ-Report ZIP File decompress path traversalanji-plus · aj-report · CWE-22 | Orta5,3 | — | %0,8 | 26 May 2024 |
21İzleyin | CVE-2024-5352İstismar yok | anji-plus AJ-Report validationRules deserializationanji-plus · aj-report · CWE-502 | Orta5,3 | — | %0,8 | 25 May 2024 |
21İzleyin | CVE-2024-5351İstismar yok | anji-plus AJ-Report Javascript getValueFromJs deserializationanji-plus · aj-report · CWE-502 | Orta5,3 | — | %0,8 | 25 May 2024 |
21İzleyin | CVE-2024-5354İstismar yok | anji-plus AJ-Report detailByCode information disclosureanji-plus · aj-report · CWE-200 | Orta5,3 | — | %0,6 | 26 May 2024 |
21İzleyin | CVE-2024-5350İstismar yok | anji-plus AJ-Report pageList sql injectionanji-plus · aj-report · CWE-89 | Orta5,3 | — | %0,6 | 25 May 2024 |
- CVE-2024-731455Planlayın
anji-plus AJ-Report Authentication Bypass
KritikCVSS 9,8Kavram kanıtıEPSS %52anji-plus · report2 Ağu 2024
- CVE-2022-4697339İzleyin
Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.
KritikCVSS 9,8İstismar yokEPSS %1anji-plus · aj-report3 Mar 2023
- CVE-2022-4298336İzleyin
anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens.
YüksekCVSS 8,8İstismar yokEPSS %2anji-plus · aj-report17 Eki 2022
- CVE-2024-535522İzleyin
anji-plus AJ-Report IGroovyHandler command injection
OrtaCVSS 5,3İstismar yokEPSS %3anji-plus · aj-report26 May 2024
- CVE-2024-535621İzleyin
anji-plus AJ-Report testTransform;swagger-ui sql injection
OrtaCVSS 5,3Kavram kanıtıEPSS %1anji-plus · aj-report26 May 2024
- CVE-2024-535321İzleyin
anji-plus AJ-Report ZIP File decompress path traversal
OrtaCVSS 5,3İstismar yokEPSS %1anji-plus · aj-report26 May 2024
- CVE-2024-535221İzleyin
anji-plus AJ-Report validationRules deserialization
OrtaCVSS 5,3İstismar yokEPSS %1anji-plus · aj-report25 May 2024
- CVE-2024-535121İzleyin
anji-plus AJ-Report Javascript getValueFromJs deserialization
OrtaCVSS 5,3İstismar yokEPSS %1anji-plus · aj-report25 May 2024
- CVE-2024-535421İzleyin
anji-plus AJ-Report detailByCode information disclosure
OrtaCVSS 5,3İstismar yokEPSS %1anji-plus · aj-report26 May 2024
- CVE-2024-535021İzleyin
anji-plus AJ-Report pageList sql injection
OrtaCVSS 5,3İstismar yokEPSS %1anji-plus · aj-report25 May 2024