hoppscotch kayıtları
hoppscotch üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %50
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-639 Authorization Bypass Through User-Controlled Key2
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')2
- CWE-532 Insertion of Sensitive Information into Log File1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2026-50160Kavram kanıtı | Mass Assignment via Onboarding Endpoint Allows Unauthenticated JWT_SECRET Overwritehoppscotch · hoppscotch · CWE-915 | Kritik10,0 | — | %1,7 | 1 Tem 2026 |
36İzleyin | CVE-2026-28215İstismar yok | hoppscotch Vulnerable to Unauthenticated Onboarding Config Takeoverhoppscotch · hoppscotch · CWE-284 | Kritik9,1 | — | %0,5 | 26 Şub 2026 |
35İzleyin | CVE-2023-34097İstismar yok | Database password exposed in logs in hoppscotchhoppscotch · hoppscotch · CWE-532 | Yüksek8,8 | — | %0,6 | 5 Haz 2023 |
34İzleyin | CVE-2026-34931İstismar yok | hoppscotch: Improper loopback redirect_uri validation in device-login flowhoppscotch · hoppscotch · CWE-601 | Yüksek8,5 | — | %0,3 | 2 Nis 2026 |
34İzleyin | CVE-2026-34932İstismar yok | hoppscotch: Stored XSS via mock server responses on backend originhoppscotch · hoppscotch · CWE-79 | Yüksek8,5 | — | %0,2 | 2 Nis 2026 |
33İzleyin | CVE-2024-34347İstismar yok | @hoppscotch/cli affected by Sandbox Escape in @hoppscotch/js-sandbox leads to RCEhoppscotch · hoppscotch · CWE-77 | Yüksek8,3 | — | %0,6 | 8 May 2024 |
33İzleyin | CVE-2026-28216İstismar yok | hoppscotch has IDOR in updateUserEnvironment / deleteUserEnvironmenthoppscotch · hoppscotch · CWE-639 | Yüksek8,3 | — | %0,4 | 26 Şub 2026 |
32İzleyin | CVE-2022-0121İstismar yok | Cross-site Scripting in hoppscotch/hoppscotchhoppscotch · hoppscotch · CWE-79 | Yüksek8,0 | — | %1,2 | 5 Oca 2022 |
30İzleyin | CVE-2024-34714İstismar yok | Hoppscotch Extension responds to calls made by origins not in the domain listhoppscotch · hoppscotch-extension · CWE-354 | Yüksek7,6 | — | %0,3 | 14 May 2024 |
26İzleyin | CVE-2026-28217İstismar yok | IDOR in GraphQL userCollection Query Exposes Other Users' Private Collectionshoppscotch · hoppscotch · CWE-862 | Orta6,5 | — | %0,4 | 26 Şub 2026 |
26İzleyin | CVE-2026-30825İstismar yok | hoppscotch: IDOR - Any authenticated user can revoke any other user's Personal Access Tokenhoppscotch · hoppscotch · CWE-639 | Orta6,5 | — | %0,2 | 7 Mar 2026 |
24İzleyin | CVE-2026-34847Kavram kanıtı | hoppscotch: Open redirect via `/enter?redirect=`hoppscotch · hoppscotch · CWE-601 | Orta6,1 | — | %0,4 | 2 Nis 2026 |
21İzleyin | CVE-2024-27092İstismar yok | Content spoofing - real Hoppscotch emailshoppscotch · hoppscotch · CWE-20 | Orta5,4 | — | %0,6 | 28 Şub 2024 |
21İzleyin | CVE-2026-34848İstismar yok | hoppscotch: Stored XSS in team member overflow tooltip via display namehoppscotch · hoppscotch · CWE-79 | Orta5,4 | — | %0,1 | 2 Nis 2026 |
- CVE-2026-5016041Planlayın
Mass Assignment via Onboarding Endpoint Allows Unauthenticated JWT_SECRET Overwrite
KritikCVSS 10,0Kavram kanıtıEPSS %1hoppscotch · hoppscotch1 Tem 2026
- CVE-2026-2821536İzleyin
hoppscotch Vulnerable to Unauthenticated Onboarding Config Takeover
KritikCVSS 9,1İstismar yokEPSS %0hoppscotch · hoppscotch26 Şub 2026
- CVE-2023-3409735İzleyin
Database password exposed in logs in hoppscotch
YüksekCVSS 8,8İstismar yokEPSS %0hoppscotch · hoppscotch5 Haz 2023
- CVE-2026-3493134İzleyin
hoppscotch: Improper loopback redirect_uri validation in device-login flow
YüksekCVSS 8,5İstismar yokEPSS %0hoppscotch · hoppscotch2 Nis 2026
- CVE-2026-3493234İzleyin
hoppscotch: Stored XSS via mock server responses on backend origin
YüksekCVSS 8,5İstismar yokEPSS %0hoppscotch · hoppscotch2 Nis 2026
- CVE-2024-3434733İzleyin
@hoppscotch/cli affected by Sandbox Escape in @hoppscotch/js-sandbox leads to RCE
YüksekCVSS 8,3İstismar yokEPSS %0hoppscotch · hoppscotch8 May 2024
- CVE-2026-2821633İzleyin
hoppscotch has IDOR in updateUserEnvironment / deleteUserEnvironment
YüksekCVSS 8,3İstismar yokEPSS %0hoppscotch · hoppscotch26 Şub 2026
- CVE-2022-012132İzleyin
Cross-site Scripting in hoppscotch/hoppscotch
YüksekCVSS 8,0İstismar yokEPSS %1hoppscotch · hoppscotch5 Oca 2022
- CVE-2024-3471430İzleyin
Hoppscotch Extension responds to calls made by origins not in the domain list
YüksekCVSS 7,6İstismar yokEPSS %0hoppscotch · hoppscotch-extension14 May 2024
- CVE-2026-2821726İzleyin
IDOR in GraphQL userCollection Query Exposes Other Users' Private Collections
OrtaCVSS 6,5İstismar yokEPSS %0hoppscotch · hoppscotch26 Şub 2026
- CVE-2026-3082526İzleyin
hoppscotch: IDOR - Any authenticated user can revoke any other user's Personal Access Token
OrtaCVSS 6,5İstismar yokEPSS %0hoppscotch · hoppscotch7 Mar 2026
- CVE-2026-3484724İzleyin
hoppscotch: Open redirect via `/enter?redirect=`
OrtaCVSS 6,1Kavram kanıtıEPSS %0hoppscotch · hoppscotch2 Nis 2026
- CVE-2024-2709221İzleyin
Content spoofing - real Hoppscotch emails
OrtaCVSS 5,4İstismar yokEPSS %0hoppscotch · hoppscotch28 Şub 2024
- CVE-2026-3484821İzleyin
hoppscotch: Stored XSS in team member overflow tooltip via display name
OrtaCVSS 5,4İstismar yokEPSS %0hoppscotch · hoppscotch2 Nis 2026