Vulnerabilidades en rucio
9 resultadosAnálisis Vexday
Rúcio apresenta 9 vulnerabilidades conhecidas, com 2 classificadas como críticas, mas nenhuma sob ataque ativo no momento. A fraqueza dominante (CWE-1004) refere-se a controles de acesso inadequados, e 2 vulnerabilidades foram publicadas nos últimos 90 dias, indicando um risco moderado com foco em questões de autorização que demandam atenção no curto prazo.
CVE-2025-54064MEDIUMrucio-server, rucio-ui, and rucio-webui vulnerable to insertion of X-Rucio-Auth-Token in apache access logfilesEPSS 0.4%CVE-2026-25138MEDIUMRucio WebUI has Username Enumeration via Login Error MessageEPSS 0.3%CVE-2026-29090CRITICALRucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata databaseEPSS 0.3%CVE-2026-25734MEDIUMRucio WebUI has Stored Cross-site Scripting (XSS) in RSE MetadataEPSS 0.3%CVE-2026-25736MEDIUMRucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE AttributeEPSS 0.3%CVE-2026-25735MEDIUMRucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity NameEPSS 0.3%CVE-2026-29080CRITICALRucio SQL Injection in FilterEngine Oracle JSON Path via DID Search APIEPSS 0.3%CVE-2026-25136HIGHRucio WebUI has a Reflected Cross-site Scripting VulnerabilityEPSS 0.3%CVE-2026-25733HIGHRucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule FunctionEPSS 0.3%