datax-web project kayıtları
datax-web project üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-266 Incorrect Privilege Assignment1
- CWE-502 Deserialization of Untrusted Data1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
42Planlayın | CVE-2023-7116Kavram kanıtı | WeiYe-Jing datax-web HTTP POST Request killJob os command injectiondatax-web project · datax-web · CWE-78 | Kritik9,8 | — | %9,9 | 27 Ara 2023 |
39İzleyin | CVE-2022-46478İstismar yok | The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitrdatax-web project · datax-web · CWE-502 | Kritik9,8 | — | %1,0 | 12 Oca 2023 |
23İzleyin | CVE-2024-12358İstismar yok | WeiYe-Jing datax-web add os command injectiondatax-web project · datax-web · CWE-77 | Orta5,3 | — | %5,1 | 9 Ara 2024 |
8İzleyin | CVE-2025-13250İstismar yok | WeiYe-Jing datax-web Job triggerJob access controldatax-web project · datax-web · CWE-266 | Düşük2,1 | — | %0,3 | 16 Kas 2025 |
8İzleyin | CVE-2025-13251İstismar yok | WeiYe-Jing datax-web sql injectiondatax-web project · datax-web · CWE-74 | Düşük2,1 | — | %0,3 | 16 Kas 2025 |
- CVE-2023-711642Planlayın
WeiYe-Jing datax-web HTTP POST Request killJob os command injection
KritikCVSS 9,8Kavram kanıtıEPSS %9datax-web project · datax-web27 Ara 2023
- CVE-2022-4647839İzleyin
The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitr
KritikCVSS 9,8İstismar yokEPSS %1datax-web project · datax-web12 Oca 2023
- CVE-2024-1235823İzleyin
WeiYe-Jing datax-web add os command injection
OrtaCVSS 5,3İstismar yokEPSS %5datax-web project · datax-web9 Ara 2024
- CVE-2025-132508İzleyin
WeiYe-Jing datax-web Job triggerJob access control
DüşükCVSS 2,1İstismar yokEPSS %0datax-web project · datax-web16 Kas 2025
- CVE-2025-132518İzleyin
WeiYe-Jing datax-web sql injection
DüşükCVSS 2,1İstismar yokEPSS %0datax-web project · datax-web16 Kas 2025