AzuraCast kayıtları
azuracast üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-2531İstismar yok | Improper Restriction of Excessive Authentication Attempts in azuracast/azuracastazuracast · azuracast · CWE-307 | Kritik9,8 | — | %0,7 | 4 May 2023 |
35İzleyin | CVE-2026-42605İstismar yok | AzuraCast: Path Traversal in `currentDirectory` Parameter Enables Remote Code Execution via Media Uploadazuracast · azuracast · CWE-22 | Yüksek8,8 | — | %0,8 | 9 May 2026 |
35İzleyin | CVE-2026-42606İstismar yok | AzuraCast: Password Reset Poisoning via Untrusted X-Forwarded-Host Header Leads to Account Takeover and 2FA Bypassazuracast · azuracast · CWE-640 | Yüksek8,8 | — | %0,4 | 9 May 2026 |
19İzleyin | CVE-2023-2191İstismar yok | Cross-site Scripting (XSS) - Stored in azuracast/azuracastazuracast · azuracast · CWE-79 | Orta4,8 | — | %0,5 | 19 Nis 2023 |
14İzleyin | CVE-2025-67737İstismar yok | AzuraCast Vulnerable to Pre-Auth File Deletion & Admin RCEazuracast · azuracast · CWE-862 | Düşük3,7 | — | %0,2 | 12 Ara 2025 |
- CVE-2023-253139İzleyin
Improper Restriction of Excessive Authentication Attempts in azuracast/azuracast
KritikCVSS 9,8İstismar yokEPSS %0azuracast · azuracast4 May 2023
- CVE-2026-4260535İzleyin
AzuraCast: Path Traversal in `currentDirectory` Parameter Enables Remote Code Execution via Media Upload
YüksekCVSS 8,8İstismar yokEPSS %0azuracast · azuracast9 May 2026
- CVE-2026-4260635İzleyin
AzuraCast: Password Reset Poisoning via Untrusted X-Forwarded-Host Header Leads to Account Takeover and 2FA Bypass
YüksekCVSS 8,8İstismar yokEPSS %0azuracast · azuracast9 May 2026
- CVE-2023-219119İzleyin
Cross-site Scripting (XSS) - Stored in azuracast/azuracast
OrtaCVSS 4,8İstismar yokEPSS %0azuracast · azuracast19 Nis 2023
- CVE-2025-6773714İzleyin
AzuraCast Vulnerable to Pre-Auth File Deletion & Admin RCE
DüşükCVSS 3,7İstismar yokEPSS %0azuracast · azuracast12 Ara 2025