Requarks kayıtları
requarks üreticisine ait 16 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %31,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-287 Improper Authentication1
- CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine1
- CWE-613 Insufficient Session Expiration1
- CWE-670 Always-Incorrect Control Flow Implementation1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
16 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2025-56643Kavram kanıtı | Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out.requarks · wiki.js · CWE-613 | Kritik9,1 | — | %0,4 | 18 Kas 2025 |
34İzleyin | CVE-2026-44224İstismar yok | Wiki.js: Privilege Escalation via Missing Group Validation in users.updaterequarks · wiki.js · CWE-269 | Yüksek8,6 | — | %0,6 | 12 May 2026 |
31İzleyin | CVE-2020-15236İstismar yok | Directory Traversal in Wiki.jsrequarks · wiki.js · CWE-22 | Yüksek7,5 | — | %1,8 | 5 Eki 2020 |
31İzleyin | CVE-2021-43800İstismar yok | Asset directory traversal with some storage modules on Windowsrequarks · wiki.js · CWE-22 | Yüksek7,5 | — | %1,7 | 6 Ara 2021 |
29İzleyin | CVE-2022-1681İstismar yok | Authentication Bypass Using an Alternate Path or Channel in requarks/wikirequarks · wiki.js · CWE-288 | Yüksek7,2 | — | %1,9 | 12 May 2022 |
28İzleyin | CVE-2024-34710İstismar yok | Wiki.js Stored XSS through Client Side Template Injectionrequarks · wiki · CWE-1336 | Yüksek7,1 | — | %0,4 | 20 May 2024 |
26İzleyin | CVE-2022-23654İstismar yok | Improper write access check in Requarks/wikirequarks · wiki.js · CWE-287 | Orta6,5 | — | %0,7 | 22 Şub 2022 |
24İzleyin | CVE-2020-4052İstismar yok | Stored XSS through template injection in Wiki.jsrequarks · wiki.js · CWE-79 | Orta6,1 | — | %0,8 | 16 Haz 2020 |
21İzleyin | CVE-2021-43855İstismar yok | Stored XSS via SVG in Requarks/wikirequarks · wiki.js · CWE-79 | Orta5,4 | — | %0,9 | 27 Ara 2021 |
21İzleyin | CVE-2021-43856İstismar yok | Stored XSS in non-image uploads in Requarks/wikirequarks · wiki.js · CWE-79 | Orta5,4 | — | %0,9 | 27 Ara 2021 |
21İzleyin | CVE-2021-21383İstismar yok | Wiki.js an open-source wiki app built on Node.js.requarks · wiki.js · CWE-79 | Orta5,4 | — | %0,9 | 18 Mar 2021 |
21İzleyin | CVE-2020-15274İstismar yok | Stored XSS via search result in Wiki.jsrequarks · wiki.js · CWE-79 | Orta5,4 | — | %0,8 | 26 Eki 2020 |
21İzleyin | CVE-2021-43842İstismar yok | Stored XSS via SVG file upload in Wiki.jsrequarks · wiki.js · CWE-79 | Orta5,4 | — | %0,7 | 20 Ara 2021 |
21İzleyin | CVE-2021-25993İstismar yok | Requarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editorrequarks · wiki.js · CWE-79 | Orta5,4 | — | %0,6 | 29 Ara 2021 |
19İzleyin | CVE-2020-11051İstismar yok | In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor.requarks · wiki.js · CWE-79 | Orta4,8 | — | %0,6 | 5 May 2020 |
17İzleyin | CVE-2024-45298İstismar yok | Disabled user can bypass lockout by requesting password reset in wiki.jsrequarks · wiki · CWE-670 | Orta4,3 | — | %0,4 | 18 Eyl 2024 |
- CVE-2025-5664336İzleyin
Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out.
KritikCVSS 9,1Kavram kanıtıEPSS %0requarks · wiki.js18 Kas 2025
- CVE-2026-4422434İzleyin
Wiki.js: Privilege Escalation via Missing Group Validation in users.update
YüksekCVSS 8,6İstismar yokEPSS %1requarks · wiki.js12 May 2026
- CVE-2020-1523631İzleyin
Directory Traversal in Wiki.js
YüksekCVSS 7,5İstismar yokEPSS %2requarks · wiki.js5 Eki 2020
- CVE-2021-4380031İzleyin
Asset directory traversal with some storage modules on Windows
YüksekCVSS 7,5İstismar yokEPSS %2requarks · wiki.js6 Ara 2021
- CVE-2022-168129İzleyin
Authentication Bypass Using an Alternate Path or Channel in requarks/wiki
YüksekCVSS 7,2İstismar yokEPSS %2requarks · wiki.js12 May 2022
- CVE-2024-3471028İzleyin
Wiki.js Stored XSS through Client Side Template Injection
YüksekCVSS 7,1İstismar yokEPSS %0requarks · wiki20 May 2024
- CVE-2022-2365426İzleyin
Improper write access check in Requarks/wiki
OrtaCVSS 6,5İstismar yokEPSS %1requarks · wiki.js22 Şub 2022
- CVE-2020-405224İzleyin
Stored XSS through template injection in Wiki.js
OrtaCVSS 6,1İstismar yokEPSS %1requarks · wiki.js16 Haz 2020
- CVE-2021-4385521İzleyin
Stored XSS via SVG in Requarks/wiki
OrtaCVSS 5,4İstismar yokEPSS %1requarks · wiki.js27 Ara 2021
- CVE-2021-4385621İzleyin
Stored XSS in non-image uploads in Requarks/wiki
OrtaCVSS 5,4İstismar yokEPSS %1requarks · wiki.js27 Ara 2021
- CVE-2021-2138321İzleyin
Wiki.js an open-source wiki app built on Node.js.
OrtaCVSS 5,4İstismar yokEPSS %1requarks · wiki.js18 Mar 2021
- CVE-2020-1527421İzleyin
Stored XSS via search result in Wiki.js
OrtaCVSS 5,4İstismar yokEPSS %1requarks · wiki.js26 Eki 2020
- CVE-2021-4384221İzleyin
Stored XSS via SVG file upload in Wiki.js
OrtaCVSS 5,4İstismar yokEPSS %1requarks · wiki.js20 Ara 2021
- CVE-2021-2599321İzleyin
Requarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editor
OrtaCVSS 5,4İstismar yokEPSS %1requarks · wiki.js29 Ara 2021
- CVE-2020-1105119İzleyin
In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor.
OrtaCVSS 4,8İstismar yokEPSS %1requarks · wiki.js5 May 2020
- CVE-2024-4529817İzleyin
Disabled user can bypass lockout by requesting password reset in wiki.js
OrtaCVSS 4,3İstismar yokEPSS %0requarks · wiki18 Eyl 2024