scratchoauth2 project kayıtları
scratchoauth2 project üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-863 Incorrect Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2021-46250İstismar yok | An issue in SOA2Login::commented of ScratchOAuth2 before commit a91879bd58fa83b09283c0708a1864cdf067c64a allows attackers to authenticate asscratchoauth2 project · scratchoauth2 | Kritik10,0 | — | %1,0 | 15 Şub 2022 |
27İzleyin | CVE-2021-29437İstismar yok | Account compromise by man-in-the-middle attackscratchoauth2 project · scratchoauth2 · CWE-863 | Orta6,8 | — | %0,8 | 13 Nis 2021 |
26İzleyin | CVE-2021-46249İstismar yok | An authorization bypass exploited by a user-controlled key in SpecificApps REST API in ScratchOAuth2 before commit d856dc704b2504cd3b92cf089scratchoauth2 project · scratchoauth2 · CWE-639 | Orta6,5 | — | %0,6 | 15 Şub 2022 |
24İzleyin | CVE-2021-46251İstismar yok | A reflected cross-site scripting (XSS) in ScratchOAuth2 before commit 1603f04e44ef67dde6ccffe866d2dca16defb293 allows attackers to execute ascratchoauth2 project · scratchoauth2 · CWE-79 | Orta6,1 | — | %0,5 | 15 Şub 2022 |
- CVE-2021-4625040Planlayın
An issue in SOA2Login::commented of ScratchOAuth2 before commit a91879bd58fa83b09283c0708a1864cdf067c64a allows attackers to authenticate as
KritikCVSS 10,0İstismar yokEPSS %1scratchoauth2 project · scratchoauth215 Şub 2022
- CVE-2021-2943727İzleyin
Account compromise by man-in-the-middle attack
OrtaCVSS 6,8İstismar yokEPSS %0scratchoauth2 project · scratchoauth213 Nis 2021
- CVE-2021-4624926İzleyin
An authorization bypass exploited by a user-controlled key in SpecificApps REST API in ScratchOAuth2 before commit d856dc704b2504cd3b92cf089
OrtaCVSS 6,5İstismar yokEPSS %0scratchoauth2 project · scratchoauth215 Şub 2022
- CVE-2021-4625124İzleyin
A reflected cross-site scripting (XSS) in ScratchOAuth2 before commit 1603f04e44ef67dde6ccffe866d2dca16defb293 allows attackers to execute a
OrtaCVSS 6,1İstismar yokEPSS %0scratchoauth2 project · scratchoauth215 Şub 2022