audiobookshelf kayıtları
audiobookshelf üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %8,3
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %33,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-202 Exposure of Sensitive Information Through Data Queries1
- CWE-523 Unprotected Transport of Credentials1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
60Bu hafta | CVE-2025-25205Silahlaştırılmış | Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matchingaudiobookshelf · audiobookshelf · CWE-202 | Yüksek8,2 | — | %4,7 | 12 Şub 2025 |
35İzleyin | CVE-2025-57800İstismar yok | Audiobookshelf vulnerable to OIDC token exfiltration and account takeoveraudiobookshelf · audiobookshelf · CWE-523 | Yüksek8,8 | — | %0,4 | 22 Ağu 2025 |
30İzleyin | CVE-2023-51665İstismar yok | Audiobookshelf vulnerable to Blind SSRF in `Auth.js`audiobookshelf · audiobookshelf · CWE-918 | Yüksek7,5 | — | %0,3 | 27 Ara 2023 |
30İzleyin | CVE-2023-51697İstismar yok | Audiobookshelf vulnerable to Blind SSRF in `podcastUtils.js`audiobookshelf · audiobookshelf · CWE-918 | Yüksek7,5 | — | %0,3 | 27 Ara 2023 |
27İzleyin | CVE-2025-46338İstismar yok | Audiobookshelf Vulnerable to Cross-Site-Scripting Reflected via POST Request in /api/uploadaudiobookshelf · audiobookshelf · CWE-79 | Orta6,9 | — | %0,3 | 29 Nis 2025 |
26İzleyin | CVE-2023-47624İstismar yok | Audiobookshelf Arbitrary File Read Vulnerabilityaudiobookshelf · audiobookshelf · CWE-22 | Orta6,5 | — | %0,8 | 13 Ara 2023 |
26İzleyin | CVE-2023-47619İstismar yok | Audiobookshelf Server-Side Request Forgery and Arbitrary File Read Vulnerabilityaudiobookshelf · audiobookshelf · CWE-200 | Orta6,5 | — | %0,6 | 13 Ara 2023 |
19İzleyin | CVE-2024-35236İstismar yok | Audiobookshelf Cross-Site-Scripting vulnerability via crafted ebooksaudiobookshelf · audiobookshelf · CWE-79 | Orta4,8 | — | %0,8 | 27 May 2024 |
19İzleyin | CVE-2026-27963İstismar yok | Audiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadataaudiobookshelf · audiobookshelf · CWE-79 | Orta4,8 | — | %0,2 | 25 Şub 2026 |
19İzleyin | CVE-2026-27974İstismar yok | Audiobooksheld VUlnerable to Stored XSS in WrappingMarquee.js via Audiobook Metadata (Mobile App Audio Player)audiobookshelf · audiobookshelf mobile app · CWE-79 | Orta4,8 | — | %0,2 | 25 Şub 2026 |
19İzleyin | CVE-2026-27973İstismar yok | Audiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App)audiobookshelf · audiobookshelf · CWE-79 | Orta4,8 | — | %0,1 | 25 Şub 2026 |
17İzleyin | CVE-2024-43797İstismar yok | Path Traversal in audiobookshelfaudiobookshelf · audiobookshelf · CWE-22 | Orta4,3 | — | %0,5 | 2 Eyl 2024 |
- CVE-2025-2520560Bu hafta
Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching
YüksekCVSS 8,2SilahlaştırılmışEPSS %4audiobookshelf · audiobookshelf12 Şub 2025
- CVE-2025-5780035İzleyin
Audiobookshelf vulnerable to OIDC token exfiltration and account takeover
YüksekCVSS 8,8İstismar yokEPSS %0audiobookshelf · audiobookshelf22 Ağu 2025
- CVE-2023-5166530İzleyin
Audiobookshelf vulnerable to Blind SSRF in `Auth.js`
YüksekCVSS 7,5İstismar yokEPSS %0audiobookshelf · audiobookshelf27 Ara 2023
- CVE-2023-5169730İzleyin
Audiobookshelf vulnerable to Blind SSRF in `podcastUtils.js`
YüksekCVSS 7,5İstismar yokEPSS %0audiobookshelf · audiobookshelf27 Ara 2023
- CVE-2025-4633827İzleyin
Audiobookshelf Vulnerable to Cross-Site-Scripting Reflected via POST Request in /api/upload
OrtaCVSS 6,9İstismar yokEPSS %0audiobookshelf · audiobookshelf29 Nis 2025
- CVE-2023-4762426İzleyin
Audiobookshelf Arbitrary File Read Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0audiobookshelf · audiobookshelf13 Ara 2023
- CVE-2023-4761926İzleyin
Audiobookshelf Server-Side Request Forgery and Arbitrary File Read Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0audiobookshelf · audiobookshelf13 Ara 2023
- CVE-2024-3523619İzleyin
Audiobookshelf Cross-Site-Scripting vulnerability via crafted ebooks
OrtaCVSS 4,8İstismar yokEPSS %0audiobookshelf · audiobookshelf27 May 2024
- CVE-2026-2796319İzleyin
Audiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadata
OrtaCVSS 4,8İstismar yokEPSS %0audiobookshelf · audiobookshelf25 Şub 2026
- CVE-2026-2797419İzleyin
Audiobooksheld VUlnerable to Stored XSS in WrappingMarquee.js via Audiobook Metadata (Mobile App Audio Player)
OrtaCVSS 4,8İstismar yokEPSS %0audiobookshelf · audiobookshelf mobile app25 Şub 2026
- CVE-2026-2797319İzleyin
Audiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App)
OrtaCVSS 4,8İstismar yokEPSS %0audiobookshelf · audiobookshelf25 Şub 2026
- CVE-2024-4379717İzleyin
Path Traversal in audiobookshelf
OrtaCVSS 4,3İstismar yokEPSS %0audiobookshelf · audiobookshelf2 Eyl 2024