strawberry kayıtları
strawberry üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %83,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-400 Uncontrolled Resource Consumption2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-306 Missing Authentication for Critical Function1
- CWE-770 Allocation of Resources Without Limits or Throttling1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
42Planlayın | CVE-2009-1774Kavram kanıtı | Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and execute arbitrary localstrawberry · strawberry · CWE-22 | Kritik9,3 | — | %17,9 | 22 May 2009 |
30İzleyin | CVE-2026-35523İstismar yok | Authentication bypass in strawberry-graphql via legacy graphql-ws WebSocket subprotocolstrawberry · strawberry graphql · CWE-306 | Yüksek7,5 | — | %0,6 | 7 Nis 2026 |
30İzleyin | CVE-2026-35526İstismar yok | Strawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptionsstrawberry · strawberry graphql · CWE-770 | Yüksek7,5 | — | %0,5 | 7 Nis 2026 |
21İzleyin | CVE-2026-47707İstismar yok | Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplificationstrawberry · strawberry graphql · CWE-400 | Orta5,3 | — | %0,7 | 4 Haz 2026 |
21İzleyin | CVE-2026-47706İstismar yok | Strawberry GraphQL has a Circular Fragment Reference DOSstrawberry · strawberry graphql · CWE-400 | Orta5,3 | — | %0,4 | 4 Haz 2026 |
17İzleyin | CVE-2026-45739İstismar yok | Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLsstrawberry · strawberry graphql · CWE-200 | Orta4,3 | — | %0,4 | 4 Haz 2026 |
- CVE-2009-177442Planlayın
Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and execute arbitrary local
KritikCVSS 9,3Kavram kanıtıEPSS %18strawberry · strawberry22 May 2009
- CVE-2026-3552330İzleyin
Authentication bypass in strawberry-graphql via legacy graphql-ws WebSocket subprotocol
YüksekCVSS 7,5İstismar yokEPSS %1strawberry · strawberry graphql7 Nis 2026
- CVE-2026-3552630İzleyin
Strawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptions
YüksekCVSS 7,5İstismar yokEPSS %0strawberry · strawberry graphql7 Nis 2026
- CVE-2026-4770721İzleyin
Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification
OrtaCVSS 5,3İstismar yokEPSS %1strawberry · strawberry graphql4 Haz 2026
- CVE-2026-4770621İzleyin
Strawberry GraphQL has a Circular Fragment Reference DOS
OrtaCVSS 5,3İstismar yokEPSS %0strawberry · strawberry graphql4 Haz 2026
- CVE-2026-4573917İzleyin
Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs
OrtaCVSS 4,3İstismar yokEPSS %0strawberry · strawberry graphql4 Haz 2026