Vulnerabilidades em Countly
7 resultadosAnálise Vexday
Countly apresenta um perfil de risco baixo com apenas 2 vulnerabilidades catalogadas, nenhuma sob ataque ativo ou crítica. A fraqueza dominante (CWE-640 - Fraco Acesso a Credenciais) sugere questões de gestão de autenticação, mas sem evidência de exploração em campo ou atividade recente.
CVE-2022-29174HIGHPredictable password reset token may lead to account takeover in countly-serverEPSS 1.5%CVE-2021-32852MEDIUMcountly-server vulnerable to Cross-site ScriptingEPSS 0.9%CVE-2026-42270HIGHcountly-server: Unauthenticated Denial of Service (DoS) via Unhandled Stream ExceptionEPSS 0.5%CVE-2026-41582HIGHcountly-server: Unauthenticated Path Traversal via Public Image and Screenshot Routes Leads to Read Internal FilesEPSS 0.5%CVE-2026-42269HIGHcountly-server: Path Traversal in delete_import Endpoint Allows Arbitrary File and Directory DeletionEPSS 0.5%CVE-2026-44977CRITICALcountly-server: Stored XSS in feedback upload enables app-admin to compromise global admin session contextEPSS 0.4%CVE-2026-87803HIGHAn authorization bypass vulnerability exists in the Countly Server DBViewer due to flawed sub-pipeline detection in the aggregation stage saEPSS 0.3%