hedgedoc kayıtları
hedgedoc üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %61,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-20 Improper Input Validation1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-289 Authentication Bypass by Alternate Name1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2021-29475İstismar yok | PDF export allows arbitrary file readshedgedoc · hedgedoc · CWE-94 | Kritik10,0 | — | %1,1 | 26 Nis 2021 |
34İzleyin | CVE-2020-26287İstismar yok | Stored XSS in mermaid diagramshedgedoc · hedgedoc · CWE-79 | Yüksek8,7 | — | %1,4 | 28 Ara 2020 |
32İzleyin | CVE-2023-38487İstismar yok | HedgeDoc API allows to hide existing noteshedgedoc · hedgedoc · CWE-289 | Yüksek8,2 | — | %0,7 | 4 Ağu 2023 |
30İzleyin | CVE-2020-26286İstismar yok | Arbitary file uploadhedgedoc · hedgedoc · CWE-434 | Yüksek7,5 | — | %1,4 | 28 Ara 2020 |
26İzleyin | CVE-2024-45308İstismar yok | MySQL & free URL mode allows to hide existing notes in hedgedochedgedoc · hedgedoc · CWE-1289 | Orta6,5 | — | %0,5 | 2 Eyl 2024 |
24İzleyin | CVE-2021-21259İstismar yok | Stored XSS in slide modehedgedoc · hedgedoc · CWE-79 | Orta6,1 | — | %1,3 | 22 Oca 2021 |
24İzleyin | CVE-2021-29503İstismar yok | Improper Neutralization of Script-Related HTML Tags in Noteshedgedoc · hedgedoc · CWE-80 | Orta6,1 | — | %1,0 | 19 May 2021 |
24İzleyin | CVE-2021-39175İstismar yok | XSS vector in slide mode speaker-viewhedgedoc · hedgedoc · CWE-74 | Orta6,1 | — | %0,6 | 30 Ağu 2021 |
24İzleyin | CVE-2026-25642İstismar yok | HedgeDoc security headers for uploaded files were not workinghedgedoc · hedgedoc · CWE-79 | Orta6,1 | — | %0,4 | 6 Şub 2026 |
23İzleyin | CVE-2021-29474İstismar yok | Relative Path Traversal Attack on note creationhedgedoc · hedgedoc · CWE-20 | Orta5,8 | — | %1,5 | 26 Nis 2021 |
21İzleyin | CVE-2022-24837İstismar yok | Enumerable upload file names in hedgedochedgedoc · hedgedoc · CWE-200 | Orta5,3 | — | %1,1 | 11 Nis 2022 |
18İzleyin | CVE-2025-32391İstismar yok | HedgeDoc allows XSS possibility through malicious SVG uploadshedgedoc · hedgedoc · CWE-79 | Orta4,6 | — | %0,3 | 10 Nis 2025 |
17İzleyin | CVE-2025-66629İstismar yok | HedgeDoc is missing state parameter in OAuth2 flows could lead to CSRFhedgedoc · hedgedoc · CWE-352 | Orta4,3 | — | %0,1 | 5 Ara 2025 |
- CVE-2021-2947540Planlayın
PDF export allows arbitrary file reads
KritikCVSS 10,0İstismar yokEPSS %1hedgedoc · hedgedoc26 Nis 2021
- CVE-2020-2628734İzleyin
Stored XSS in mermaid diagrams
YüksekCVSS 8,7İstismar yokEPSS %1hedgedoc · hedgedoc28 Ara 2020
- CVE-2023-3848732İzleyin
HedgeDoc API allows to hide existing notes
YüksekCVSS 8,2İstismar yokEPSS %0hedgedoc · hedgedoc4 Ağu 2023
- CVE-2020-2628630İzleyin
Arbitary file upload
YüksekCVSS 7,5İstismar yokEPSS %1hedgedoc · hedgedoc28 Ara 2020
- CVE-2024-4530826İzleyin
MySQL & free URL mode allows to hide existing notes in hedgedoc
OrtaCVSS 6,5İstismar yokEPSS %0hedgedoc · hedgedoc2 Eyl 2024
- CVE-2021-2125924İzleyin
Stored XSS in slide mode
OrtaCVSS 6,1İstismar yokEPSS %1hedgedoc · hedgedoc22 Oca 2021
- CVE-2021-2950324İzleyin
Improper Neutralization of Script-Related HTML Tags in Notes
OrtaCVSS 6,1İstismar yokEPSS %1hedgedoc · hedgedoc19 May 2021
- CVE-2021-3917524İzleyin
XSS vector in slide mode speaker-view
OrtaCVSS 6,1İstismar yokEPSS %0hedgedoc · hedgedoc30 Ağu 2021
- CVE-2026-2564224İzleyin
HedgeDoc security headers for uploaded files were not working
OrtaCVSS 6,1İstismar yokEPSS %0hedgedoc · hedgedoc6 Şub 2026
- CVE-2021-2947423İzleyin
Relative Path Traversal Attack on note creation
OrtaCVSS 5,8İstismar yokEPSS %1hedgedoc · hedgedoc26 Nis 2021
- CVE-2022-2483721İzleyin
Enumerable upload file names in hedgedoc
OrtaCVSS 5,3İstismar yokEPSS %1hedgedoc · hedgedoc11 Nis 2022
- CVE-2025-3239118İzleyin
HedgeDoc allows XSS possibility through malicious SVG uploads
OrtaCVSS 4,6İstismar yokEPSS %0hedgedoc · hedgedoc10 Nis 2025
- CVE-2025-6662917İzleyin
HedgeDoc is missing state parameter in OAuth2 flows could lead to CSRF
OrtaCVSS 4,3İstismar yokEPSS %0hedgedoc · hedgedoc5 Ara 2025