Vulnerabilities in Kareadita

8 results

Vexday analysis

Kareadita apresenta uma base reduzida de 4 CVEs, mas com ritmo preocupante: 3 divulgadas nos últimos 90 dias. A fraqueza dominante é autenticação inadequada (CWE-287), embora nenhuma vulnerabilidade esteja em exploração ativa conhecida no KEV. O único crítico identificado reforça a necessidade de monitoramento próximo deste fornecedor.

CVE-2022-2756HIGHServer-Side Request Forgery (SSRF) in kareadita/kavitaEPSS 3.1%CVE-2022-3993CRITICALImproper Restriction of Excessive Authentication Attempts in kareadita/kavitaEPSS 1.2%CVE-2022-3945CRITICALImproper Restriction of Excessive Authentication Attempts in kareadita/kavitaEPSS 1.0%CVE-2023-0919HIGHMissing Authentication for Critical Function in kareadita/kavitaEPSS 0.5%CVE-2024-39307LOWCross-Site Scripting (XSS) vulnerability via crafted ebooks in KavitaEPSS 0.5%CVE-2026-44775MEDIUMKavita: No authentication at /api/Reader/imageEPSS 0.3%CVE-2026-44776MEDIUMKavita: IDOR in /api/Download/*EPSS 0.3%CVE-2026-47202CRITICALKavita: Pre-Auth Account TakeoverEPSS 0.2%