Forceu kayıtları
forceu üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-284 Improper Access Control2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-770 Allocation of Resources Without Limits or Throttling1
- CWE-863 Incorrect Authorization1
- CWE-400 Uncontrolled Resource Consumption1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-28683İstismar yok | Gokapi: Stored XSS in SVG Hotlinksforceu · gokapi · CWE-79 | Yüksek8,7 | — | %0,2 | 6 Mar 2026 |
26İzleyin | CVE-2026-30955İstismar yok | Gokapi vulnerable to DoS in E2E Metadata Parserforceu · gokapi · CWE-400 | Orta6,5 | — | %0,3 | 13 Mar 2026 |
25İzleyin | CVE-2026-28682İstismar yok | Gokapi: Data Leak in Upload Status Streamforceu · gokapi · CWE-200 | Orta6,4 | — | %0,2 | 6 Mar 2026 |
21İzleyin | CVE-2026-29061İstismar yok | Gokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotionforceu · gokapi · CWE-284 | Orta5,4 | — | %0,1 | 6 Mar 2026 |
20İzleyin | CVE-2026-29060İstismar yok | Gokapi: Privilege escalation with auth tokenforceu · gokapi · CWE-284 | Orta5,0 | — | %0,2 | 6 Mar 2026 |
19İzleyin | CVE-2025-48494İstismar yok | Gokapi vulnerable to stored XSS via uploading file with malicious file nameforceu · gokapi · CWE-79 | Orta4,8 | — | %0,2 | 2 Haz 2025 |
19İzleyin | CVE-2025-48495İstismar yok | Gokapi has stored XSS vulnerability in friendly name for API keysforceu · gokapi · CWE-79 | Orta4,8 | — | %0,1 | 2 Haz 2025 |
18İzleyin | CVE-2026-29084İstismar yok | Gokapi: CSRF in Login Endpointforceu · gokapi · CWE-352 | Orta4,6 | — | %0,1 | 6 Mar 2026 |
17İzleyin | CVE-2026-30961İstismar yok | Gokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Uploadforceu · gokapi · CWE-770 | Orta4,3 | — | %0,3 | 13 Mar 2026 |
16İzleyin | CVE-2026-30943İstismar yok | Gokapi has Privilege Escalation in File Replaceforceu · gokapi · CWE-863 | Orta4,1 | — | %0,2 | 13 Mar 2026 |
- CVE-2026-2868334İzleyin
Gokapi: Stored XSS in SVG Hotlinks
YüksekCVSS 8,7İstismar yokEPSS %0forceu · gokapi6 Mar 2026
- CVE-2026-3095526İzleyin
Gokapi vulnerable to DoS in E2E Metadata Parser
OrtaCVSS 6,5İstismar yokEPSS %0forceu · gokapi13 Mar 2026
- CVE-2026-2868225İzleyin
Gokapi: Data Leak in Upload Status Stream
OrtaCVSS 6,4İstismar yokEPSS %0forceu · gokapi6 Mar 2026
- CVE-2026-2906121İzleyin
Gokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotion
OrtaCVSS 5,4İstismar yokEPSS %0forceu · gokapi6 Mar 2026
- CVE-2026-2906020İzleyin
Gokapi: Privilege escalation with auth token
OrtaCVSS 5,0İstismar yokEPSS %0forceu · gokapi6 Mar 2026
- CVE-2025-4849419İzleyin
Gokapi vulnerable to stored XSS via uploading file with malicious file name
OrtaCVSS 4,8İstismar yokEPSS %0forceu · gokapi2 Haz 2025
- CVE-2025-4849519İzleyin
Gokapi has stored XSS vulnerability in friendly name for API keys
OrtaCVSS 4,8İstismar yokEPSS %0forceu · gokapi2 Haz 2025
- CVE-2026-2908418İzleyin
Gokapi: CSRF in Login Endpoint
OrtaCVSS 4,6İstismar yokEPSS %0forceu · gokapi6 Mar 2026
- CVE-2026-3096117İzleyin
Gokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Upload
OrtaCVSS 4,3İstismar yokEPSS %0forceu · gokapi13 Mar 2026
- CVE-2026-3094316İzleyin
Gokapi has Privilege Escalation in File Replace
OrtaCVSS 4,1İstismar yokEPSS %0forceu · gokapi13 Mar 2026