Erudika kayıtları
erudika üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %57,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-639 Authorization Bypass Through User-Controlled Key2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-130 Improper Handling of Length Parameter Inconsistency1
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
- CWE-840 Business Logic Errors1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2022-1543İstismar yok | Improper handling of Length parameter in erudika/scoolderudika · scoold · CWE-130 | Yüksek8,8 | — | %1,1 | 29 Nis 2022 |
34İzleyin | CVE-2024-50334Kavram kanıtı | Semicolon Path Injection on API /api;/configerudika · scoold · CWE-288 | Yüksek8,7 | — | %1,0 | 29 Eki 2024 |
26İzleyin | CVE-2026-34832İstismar yok | Scoold: Cross-Account Feedback Deletion (IDOR)erudika · scoold · CWE-639 | Orta6,5 | — | %0,3 | 2 Nis 2026 |
26İzleyin | CVE-2026-39354İstismar yok | Scoold has an Authenticated Arbitrary Question Overwrite via Client-Controlled postId in POST /questions/askerudika · scoold · CWE-639 | Orta6,5 | — | %0,2 | 7 Nis 2026 |
24İzleyin | CVE-2022-1782İstismar yok | Cross-site Scripting (XSS) - Generic in erudika/paraerudika · para · CWE-79 | Orta6,1 | — | %0,9 | 18 May 2022 |
21İzleyin | CVE-2022-1848İstismar yok | Business Logic Errors in erudika/paraerudika · para · CWE-840 | Orta5,3 | — | %1,0 | 24 May 2022 |
21İzleyin | CVE-2021-46372İstismar yok | Scoold 1.47.2 is a Q&A/knowledge base platform written in Java.erudika · scoold · CWE-79 | Orta5,4 | — | %0,5 | 18 Şub 2022 |
- CVE-2022-154335İzleyin
Improper handling of Length parameter in erudika/scoold
YüksekCVSS 8,8İstismar yokEPSS %1erudika · scoold29 Nis 2022
- CVE-2024-5033434İzleyin
Semicolon Path Injection on API /api;/config
YüksekCVSS 8,7Kavram kanıtıEPSS %1erudika · scoold29 Eki 2024
- CVE-2026-3483226İzleyin
Scoold: Cross-Account Feedback Deletion (IDOR)
OrtaCVSS 6,5İstismar yokEPSS %0erudika · scoold2 Nis 2026
- CVE-2026-3935426İzleyin
Scoold has an Authenticated Arbitrary Question Overwrite via Client-Controlled postId in POST /questions/ask
OrtaCVSS 6,5İstismar yokEPSS %0erudika · scoold7 Nis 2026
- CVE-2022-178224İzleyin
Cross-site Scripting (XSS) - Generic in erudika/para
OrtaCVSS 6,1İstismar yokEPSS %0erudika · para18 May 2022
- CVE-2022-184821İzleyin
Business Logic Errors in erudika/para
OrtaCVSS 5,3İstismar yokEPSS %1erudika · para24 May 2022
- CVE-2021-4637221İzleyin
Scoold 1.47.2 is a Q&A/knowledge base platform written in Java.
OrtaCVSS 5,4İstismar yokEPSS %0erudika · scoold18 Şub 2022