fusionauth kayıtları
fusionauth üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %25
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-347 Improper Verification of Cryptographic Signature1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2020-12676İstismar yok | FusionAuth fusionauth-samlv2 0.2.3 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Sigfusionauth · samlv2 · CWE-347 | Kritik9,1 | — | %2,9 | 2 Eki 2020 |
34İzleyin | CVE-2020-7799Kavram kanıtı | An issue was discovered in FusionAuth before 1.11.0.fusionauth · fusionauth · CWE-917 | Yüksek7,2 | — | %19,8 | 28 Oca 2020 |
30İzleyin | CVE-2022-45921İstismar yok | FusionAuth before 1.41.3 allows a file outside of the application root to be viewed or retrieved using an HTTP request.fusionauth · fusionauth · CWE-22 | Yüksek7,5 | — | %0,7 | 28 Kas 2022 |
26İzleyin | CVE-2021-27736İstismar yok | FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or LogoutRequest because parseFromBytes uses javax.xmfusionauth · saml v2 · CWE-611 | Orta6,5 | — | %1,3 | 22 Nis 2021 |
- CVE-2020-1267637İzleyin
FusionAuth fusionauth-samlv2 0.2.3 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Sig
KritikCVSS 9,1İstismar yokEPSS %3fusionauth · samlv22 Eki 2020
- CVE-2020-779934İzleyin
An issue was discovered in FusionAuth before 1.11.0.
YüksekCVSS 7,2Kavram kanıtıEPSS %20fusionauth · fusionauth28 Oca 2020
- CVE-2022-4592130İzleyin
FusionAuth before 1.41.3 allows a file outside of the application root to be viewed or retrieved using an HTTP request.
YüksekCVSS 7,5İstismar yokEPSS %1fusionauth · fusionauth28 Kas 2022
- CVE-2021-2773626İzleyin
FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or LogoutRequest because parseFromBytes uses javax.xm
OrtaCVSS 6,5İstismar yokEPSS %1fusionauth · saml v222 Nis 2021