chatwoot kayıtları
chatwoot üreticisine ait 17 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %5,9
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
- CWE-269 Improper Privilege Management1
- CWE-285 Improper Authorization1
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
- CWE-345 Insufficient Verification of Data Authenticity1
- CWE-384 Session Fixation1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
17 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-3741İstismar yok | Improper Restriction of Excessive Authentication Attempts in chatwoot/chatwootchatwoot · chatwoot · CWE-307 | Kritik9,8 | — | %0,9 | 28 Eki 2022 |
35İzleyin | CVE-2025-21628İstismar yok | Chatwoot has a Blind SQL-injection in Conversation and Contacts filterschatwoot · chatwoot · CWE-89 | Yüksek8,8 | — | %0,7 | 9 Oca 2025 |
35İzleyin | CVE-2021-3742İstismar yok | Server-Side Request Forgery (SSRF) in chatwoot/chatwootchatwoot · chatwoot · CWE-918 | Yüksek8,8 | — | %0,4 | 15 Kas 2024 |
30İzleyin | CVE-2021-3649İstismar yok | Inefficient Regular Expression Complexity in chatwoot/chatwootchatwoot · chatwoot · CWE-1333 | Yüksek7,5 | — | %1,2 | 16 Tem 2021 |
28İzleyin | CVE-2022-2901İstismar yok | Improper Authorization in chatwoot/chatwootchatwoot · chatwoot · CWE-285 | Yüksek7,1 | — | %0,6 | 6 Eyl 2022 |
27İzleyin | CVE-2021-3740İstismar yok | Session Fixation in chatwoot/chatwootchatwoot · chatwoot · CWE-384 | Orta6,8 | — | %0,2 | 15 Kas 2024 |
26İzleyin | CVE-2021-3813İstismar yok | Improper Privilege Management in chatwoot/chatwootchatwoot · chatwoot · CWE-269 | Orta6,5 | — | %1,1 | 9 Şub 2022 |
24İzleyin | CVE-2022-0542İstismar yok | Cross-site Scripting (XSS) - DOM in chatwoot/chatwootchatwoot · chatwoot · CWE-79 | Orta6,1 | — | %0,9 | 19 Ağu 2022 |
24İzleyin | CVE-2022-0526İstismar yok | Cross-site Scripting (XSS) - Stored in chatwoot/chatwootchatwoot · chatwoot · CWE-79 | Orta6,1 | — | %0,9 | 9 Şub 2022 |
24İzleyin | CVE-2022-0527İstismar yok | Cross-site Scripting (XSS) - Stored in chatwoot/chatwootchatwoot · chatwoot · CWE-79 | Orta6,1 | — | %0,9 | 9 Şub 2022 |
24İzleyin | CVE-2023-2109İstismar yok | Cross-site Scripting (XSS) - DOM in chatwoot/chatwootchatwoot · chatwoot · CWE-79 | Orta6,1 | — | %0,4 | 16 Nis 2023 |
22İzleyin | CVE-2022-1022İstismar yok | Cross-site Scripting (XSS) - Stored in chatwoot/chatwootchatwoot · chatwoot · CWE-79 | Orta5,4 | — | %4,5 | 21 Nis 2022 |
22İzleyin | CVE-2025-12245İstismar yok | chatwoot Widget IFrameHelper.js initPostMessageCommunication origin validationchatwoot · chatwoot · CWE-345 | Orta5,5 | — | %0,3 | 27 Eki 2025 |
21İzleyin | CVE-2022-1021İstismar yok | Insecure Storage of Sensitive Information in chatwoot/chatwootchatwoot · chatwoot · CWE-922 | Orta5,4 | — | %0,7 | 19 Ağu 2022 |
21İzleyin | CVE-2021-3741İstismar yok | Stored Cross-site Scripting (XSS) in chatwoot/chatwootchatwoot · chatwoot · CWE-79 | Orta5,4 | — | %0,3 | 15 Kas 2024 |
19İzleyin | CVE-2024-0640İstismar yok | Stored XSS in chatwoot/chatwootchatwoot · chatwoot · CWE-79 | Orta4,8 | — | %0,3 | 20 Mar 2025 |
8İzleyin | CVE-2025-12246İstismar yok | chatwoot Admin IframeLoader.vue cross site scriptingchatwoot · chatwoot · CWE-79 | Düşük2,1 | — | %0,4 | 27 Eki 2025 |
- CVE-2022-374139İzleyin
Improper Restriction of Excessive Authentication Attempts in chatwoot/chatwoot
KritikCVSS 9,8İstismar yokEPSS %1chatwoot · chatwoot28 Eki 2022
- CVE-2025-2162835İzleyin
Chatwoot has a Blind SQL-injection in Conversation and Contacts filters
YüksekCVSS 8,8İstismar yokEPSS %1chatwoot · chatwoot9 Oca 2025
- CVE-2021-374235İzleyin
Server-Side Request Forgery (SSRF) in chatwoot/chatwoot
YüksekCVSS 8,8İstismar yokEPSS %0chatwoot · chatwoot15 Kas 2024
- CVE-2021-364930İzleyin
Inefficient Regular Expression Complexity in chatwoot/chatwoot
YüksekCVSS 7,5İstismar yokEPSS %1chatwoot · chatwoot16 Tem 2021
- CVE-2022-290128İzleyin
Improper Authorization in chatwoot/chatwoot
YüksekCVSS 7,1İstismar yokEPSS %1chatwoot · chatwoot6 Eyl 2022
- CVE-2021-374027İzleyin
Session Fixation in chatwoot/chatwoot
OrtaCVSS 6,8İstismar yokEPSS %0chatwoot · chatwoot15 Kas 2024
- CVE-2021-381326İzleyin
Improper Privilege Management in chatwoot/chatwoot
OrtaCVSS 6,5İstismar yokEPSS %1chatwoot · chatwoot9 Şub 2022
- CVE-2022-054224İzleyin
Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot
OrtaCVSS 6,1İstismar yokEPSS %1chatwoot · chatwoot19 Ağu 2022
- CVE-2022-052624İzleyin
Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot
OrtaCVSS 6,1İstismar yokEPSS %1chatwoot · chatwoot9 Şub 2022
- CVE-2022-052724İzleyin
Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot
OrtaCVSS 6,1İstismar yokEPSS %1chatwoot · chatwoot9 Şub 2022
- CVE-2023-210924İzleyin
Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot
OrtaCVSS 6,1İstismar yokEPSS %0chatwoot · chatwoot16 Nis 2023
- CVE-2022-102222İzleyin
Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot
OrtaCVSS 5,4İstismar yokEPSS %4chatwoot · chatwoot21 Nis 2022
- CVE-2025-1224522İzleyin
chatwoot Widget IFrameHelper.js initPostMessageCommunication origin validation
OrtaCVSS 5,5İstismar yokEPSS %0chatwoot · chatwoot27 Eki 2025
- CVE-2022-102121İzleyin
Insecure Storage of Sensitive Information in chatwoot/chatwoot
OrtaCVSS 5,4İstismar yokEPSS %1chatwoot · chatwoot19 Ağu 2022
- CVE-2021-374121İzleyin
Stored Cross-site Scripting (XSS) in chatwoot/chatwoot
OrtaCVSS 5,4İstismar yokEPSS %0chatwoot · chatwoot15 Kas 2024
- CVE-2024-064019İzleyin
Stored XSS in chatwoot/chatwoot
OrtaCVSS 4,8İstismar yokEPSS %0chatwoot · chatwoot20 Mar 2025
- CVE-2025-122468İzleyin
chatwoot Admin IframeLoader.vue cross site scripting
DüşükCVSS 2,1İstismar yokEPSS %0chatwoot · chatwoot27 Eki 2025