Vulnerabilidades en humhub
13 resultadosAnálisis Vexday
HumHub apresenta 9 vulnerabilidades catalogadas, com 1 classificada como crítica, porém nenhuma sob exploração ativa no momento. A fraqueza predominante é injeção cross-site (CWE-79), típica de aplicações web, e não há vulnerabilidades recentes nos últimos 90 dias, indicando um risco estabilizado mas que requer atenção ao XSS na superfície de ataque.
CVE-2022-24865MEDIUMImproper access control in humhubEPSS 1.2%CVE-2021-43847MEDIUMAuthorization Bypass in Space Invite in HumHubEPSS 1.2%CVE-2022-31133MEDIUMCross site scripting in HumHubEPSS 0.7%CVE-2026-18430HIGHHumHub 1.18.4 - Stored XSS in comment-deletion notifications through unescaped administrator reasonEPSS 0.4%CVE-2026-47657HIGHHumHub Missing Authorization on Remove All Space Members ActionEPSS 0.4%CVE-2026-18756HIGHHumHub Community Edition 1.18.4-pl1 - Reflected XSS in Space membership request button renderingEPSS 0.3%CVE-2026-18526HIGHHumHub 1.18.4 / 1.18.4-pl1 – Stored Cross-Site Scripting in oEmbed confirmationEPSS 0.3%CVE-2025-54790CRITICALFiles: Potential for SQL Injection through File Browse and List OperationsEPSS 0.3%CVE-2025-54789MEDIUMFiles is Vulnerable to Reflected Self-XSS through its File Move FunctionalityEPSS 0.3%CVE-2025-64442HIGHHumHub is vulnerable to XSS through its Meta Search componentEPSS 0.2%CVE-2026-29048MEDIUMHumHub: XSS in Button componentEPSS 0.2%CVE-2025-65963MEDIUMCFiles Unauthorized Folder/ZIP Access in Public SpacesEPSS 0.2%CVE-2026-29052MEDIUMHumHub Calendar Module: Stored XSS in Event TypesEPSS 0.2%