coollabs kayıtları
coollabs üreticisine ait 28 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')9
- CWE-20 Improper Input Validation3
- CWE-862 Missing Authorization3
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-116 Improper Encoding or Escaping of Output2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
28 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2025-22609İstismar yok | Coolify Vulnerable to Private Key Hijacking / Remote Command Execution (RCE)coollabs · coolify · CWE-862 | Kritik10,0 | — | %0,7 | 24 Oca 2025 |
40Planlayın | CVE-2025-22612İstismar yok | Coolify Vulnerable to Private Key Enumeration on Onboarding resulting in Remote Command Execution (RCE)coollabs · coolify · CWE-200 | Kritik10,0 | — | %0,6 | 24 Oca 2025 |
39İzleyin | CVE-2025-22611İstismar yok | Coolify vulnerable to Privilege Escalation resulting in Remote Command Execution (RCE)coollabs · coolify · CWE-862 | Kritik9,9 | — | %0,4 | 24 Oca 2025 |
38İzleyin | CVE-2025-66213İstismar yok | Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in File Storage Directory Mount Pathcoollabs · coolify · CWE-78 | Kritik9,4 | — | %3,1 | 23 Ara 2025 |
38İzleyin | CVE-2025-66212İstismar yok | Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Dynamic Proxy Configuration Filenamecoollabs · coolify · CWE-78 | Kritik9,4 | — | %3,1 | 23 Ara 2025 |
38İzleyin | CVE-2025-34161Kavram kanıtı | Coolify Git Repository Field Command Injection in Project Deployment Workflowcoollabs · coolify · CWE-20 | Kritik9,4 | — | %2,9 | 27 Ağu 2025 |
38İzleyin | CVE-2025-66210İstismar yok | Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Importcoollabs · coolify · CWE-78 | Kritik9,4 | — | %2,7 | 23 Ara 2025 |
38İzleyin | CVE-2025-66211İstismar yok | Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in PostgreSQL Init Script Filenamecoollabs · coolify · CWE-78 | Kritik9,4 | — | %2,7 | 23 Ara 2025 |
38İzleyin | CVE-2025-64424Kavram kanıtı | Colify has command injection vulnerability in project git sourcecoollabs · coolify · CWE-77 | Kritik9,4 | — | %2,0 | 5 Oca 2026 |
37İzleyin | CVE-2025-59156İstismar yok | Coolify has Docker Compose Injection issuecoollabs · coolify · CWE-78 | Kritik9,4 | — | %0,9 | 5 Oca 2026 |
37İzleyin | CVE-2025-34159Kavram kanıtı | Coolify Docker Compose Directive Injection in Application Deployment Workflowcoollabs · coolify · CWE-20 | Kritik9,4 | — | %0,9 | 27 Ağu 2025 |
37İzleyin | CVE-2025-59158İstismar yok | Coolify has Stored XSS in Project Namecoollabs · coolify · CWE-116 | Kritik9,4 | — | %0,4 | 5 Oca 2026 |
37İzleyin | CVE-2025-34157Kavram kanıtı | Coolify Stored Cross-Site Scripting (XSS) in Project Name Fieldcoollabs · coolify · CWE-20 | Kritik9,4 | — | %0,4 | 27 Ağu 2025 |
36İzleyin | CVE-2025-66209Kavram kanıtı | Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Backupcoollabs · coolify · CWE-78 | Yüksek8,8 | — | %3,8 | 23 Ara 2025 |
36İzleyin | CVE-2025-59157İstismar yok | Coolify has Git Repository RCEcoollabs · coolify · CWE-78 | Yüksek8,8 | — | %1,8 | 5 Oca 2026 |
35İzleyin | CVE-2025-64419İstismar yok | Coolify vulnerable to command injection via docker-compose.yaml parameterscoollabs · coolify · CWE-77 | Yüksek8,8 | — | %0,6 | 5 Oca 2026 |
35İzleyin | CVE-2025-64420İstismar yok | Coolify members can see private key of root usercoollabs · coolify · CWE-522 | Yüksek8,8 | — | %0,5 | 5 Oca 2026 |
34İzleyin | CVE-2025-22605İstismar yok | Coolify OS Command Injection Vulnerability in SSH Command Generationcoollabs · coolify · CWE-78 | Yüksek8,5 | — | %0,5 | 24 Oca 2025 |
34İzleyin | CVE-2025-64425İstismar yok | Coolify has host header injection in forgot passwordcoollabs · coolify · CWE-644 | Yüksek8,5 | — | %0,4 | 5 Oca 2026 |
34İzleyin | CVE-2025-64421İstismar yok | Coolify has a privilege escalation - low privileged user can invite themselves as an admin usercoollabs · coolify · CWE-863 | Yüksek8,7 | — | %0,3 | 5 Oca 2026 |
34İzleyin | CVE-2025-22606İstismar yok | Coolify Command Injection Vulnerability in Project Namecoollabs · coolify · CWE-78 | Yüksek8,5 | — | %0,2 | 24 Oca 2025 |
30İzleyin | CVE-2025-64423İstismar yok | Coolify has a Privilege Escalation - low privileged users can see and use admin invitation linkscoollabs · coolify · CWE-287 | Yüksek7,7 | — | %0,3 | 5 Oca 2026 |
26İzleyin | CVE-2025-22608İstismar yok | Coolify Vulnerable to Revocation of Arbitrary Team Invitations (DOS)coollabs · coolify · CWE-639 | Orta6,5 | — | %0,3 | 24 Oca 2025 |
22İzleyin | CVE-2025-22610İstismar yok | Coolify Vulnerable to OAuth Secrets Leakcoollabs · coolify · CWE-862 | Orta5,7 | — | %0,3 | 24 Oca 2025 |
22İzleyin | CVE-2025-64422İstismar yok | Rate-limit bypass on login via X-Forwarded-Host headercoollabs · coolify · CWE-770 | Orta5,5 | — | %0,3 | 5 Oca 2026 |
- CVE-2025-2260940Planlayın
Coolify Vulnerable to Private Key Hijacking / Remote Command Execution (RCE)
KritikCVSS 10,0İstismar yokEPSS %0coollabs · coolify24 Oca 2025
- CVE-2025-2261240Planlayın
Coolify Vulnerable to Private Key Enumeration on Onboarding resulting in Remote Command Execution (RCE)
KritikCVSS 10,0İstismar yokEPSS %0coollabs · coolify24 Oca 2025
- CVE-2025-2261139İzleyin
Coolify vulnerable to Privilege Escalation resulting in Remote Command Execution (RCE)
KritikCVSS 9,9İstismar yokEPSS %0coollabs · coolify24 Oca 2025
- CVE-2025-6621338İzleyin
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in File Storage Directory Mount Path
KritikCVSS 9,4İstismar yokEPSS %3coollabs · coolify23 Ara 2025
- CVE-2025-6621238İzleyin
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Dynamic Proxy Configuration Filename
KritikCVSS 9,4İstismar yokEPSS %3coollabs · coolify23 Ara 2025
- CVE-2025-3416138İzleyin
Coolify Git Repository Field Command Injection in Project Deployment Workflow
KritikCVSS 9,4Kavram kanıtıEPSS %2coollabs · coolify27 Ağu 2025
- CVE-2025-6621038İzleyin
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Import
KritikCVSS 9,4İstismar yokEPSS %2coollabs · coolify23 Ara 2025
- CVE-2025-6621138İzleyin
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in PostgreSQL Init Script Filename
KritikCVSS 9,4İstismar yokEPSS %2coollabs · coolify23 Ara 2025
- CVE-2025-6442438İzleyin
Colify has command injection vulnerability in project git source
KritikCVSS 9,4Kavram kanıtıEPSS %2coollabs · coolify5 Oca 2026
- CVE-2025-5915637İzleyin
Coolify has Docker Compose Injection issue
KritikCVSS 9,4İstismar yokEPSS %0coollabs · coolify5 Oca 2026
- CVE-2025-3415937İzleyin
Coolify Docker Compose Directive Injection in Application Deployment Workflow
KritikCVSS 9,4Kavram kanıtıEPSS %0coollabs · coolify27 Ağu 2025
- CVE-2025-5915837İzleyin
Coolify has Stored XSS in Project Name
KritikCVSS 9,4İstismar yokEPSS %0coollabs · coolify5 Oca 2026
- CVE-2025-3415737İzleyin
Coolify Stored Cross-Site Scripting (XSS) in Project Name Field
KritikCVSS 9,4Kavram kanıtıEPSS %0coollabs · coolify27 Ağu 2025
- CVE-2025-6620936İzleyin
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Backup
YüksekCVSS 8,8Kavram kanıtıEPSS %3coollabs · coolify23 Ara 2025
- CVE-2025-5915736İzleyin
Coolify has Git Repository RCE
YüksekCVSS 8,8İstismar yokEPSS %1coollabs · coolify5 Oca 2026
- CVE-2025-6441935İzleyin
Coolify vulnerable to command injection via docker-compose.yaml parameters
YüksekCVSS 8,8İstismar yokEPSS %0coollabs · coolify5 Oca 2026
- CVE-2025-6442035İzleyin
Coolify members can see private key of root user
YüksekCVSS 8,8İstismar yokEPSS %0coollabs · coolify5 Oca 2026
- CVE-2025-2260534İzleyin
Coolify OS Command Injection Vulnerability in SSH Command Generation
YüksekCVSS 8,5İstismar yokEPSS %0coollabs · coolify24 Oca 2025
- CVE-2025-6442534İzleyin
Coolify has host header injection in forgot password
YüksekCVSS 8,5İstismar yokEPSS %0coollabs · coolify5 Oca 2026
- CVE-2025-6442134İzleyin
Coolify has a privilege escalation - low privileged user can invite themselves as an admin user
YüksekCVSS 8,7İstismar yokEPSS %0coollabs · coolify5 Oca 2026
- CVE-2025-2260634İzleyin
Coolify Command Injection Vulnerability in Project Name
YüksekCVSS 8,5İstismar yokEPSS %0coollabs · coolify24 Oca 2025
- CVE-2025-6442330İzleyin
Coolify has a Privilege Escalation - low privileged users can see and use admin invitation links
YüksekCVSS 7,7İstismar yokEPSS %0coollabs · coolify5 Oca 2026
- CVE-2025-2260826İzleyin
Coolify Vulnerable to Revocation of Arbitrary Team Invitations (DOS)
OrtaCVSS 6,5İstismar yokEPSS %0coollabs · coolify24 Oca 2025
- CVE-2025-2261022İzleyin
Coolify Vulnerable to OAuth Secrets Leak
OrtaCVSS 5,7İstismar yokEPSS %0coollabs · coolify24 Oca 2025
- CVE-2025-6442222İzleyin
Rate-limit bypass on login via X-Forwarded-Host header
OrtaCVSS 5,5İstismar yokEPSS %0coollabs · coolify5 Oca 2026