onlook kayıtları
onlook üreticisine ait 3 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tüm kayıtlar
3 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2025-63783İstismar yok | A Broken Object Level Authorization (BOLA) vulnerability was discovered in the tRPC project mutation APIs (update, delete, add/remove tag) oonlook · onlook · CWE-20 | Yüksek7,6 | — | %0,3 | 7 Kas 2025 |
26İzleyin | CVE-2025-63784İstismar yok | An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/web/client/src/app/auth/callback/route.ts in Onlook onlook · onlook · CWE-601 | Orta6,5 | — | %0,4 | 7 Kas 2025 |
24İzleyin | CVE-2025-63785İstismar yok | A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the text editor feature of the Onlook web application 0.2.32.onlook · onlook · CWE-20 | Orta6,1 | — | %0,2 | 7 Kas 2025 |
- CVE-2025-6378330İzleyin
A Broken Object Level Authorization (BOLA) vulnerability was discovered in the tRPC project mutation APIs (update, delete, add/remove tag) o
YüksekCVSS 7,6İstismar yokEPSS %0onlook · onlook7 Kas 2025
- CVE-2025-6378426İzleyin
An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/web/client/src/app/auth/callback/route.ts in Onlook
OrtaCVSS 6,5İstismar yokEPSS %0onlook · onlook7 Kas 2025
- CVE-2025-6378524İzleyin
A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the text editor feature of the Onlook web application 0.2.32.
OrtaCVSS 6,1İstismar yokEPSS %0onlook · onlook7 Kas 2025