Vulnerabilidades em Requarks
17 resultadosAnálise Vexday
Requarks apresenta um portfólio modesto de 10 vulnerabilidades, nenhuma delas em exploração ativa ou classificada como crítica. A fraqueza predominante é Cross-Site Scripting (CWE-79), típica de aplicações web, mas sem atividade recente de disclosure, sugerindo um risco de curto prazo contido.
CVE-2022-1681HIGHAuthentication Bypass Using an Alternate Path or Channel in requarks/wikiEPSS 1.9%CVE-2020-15236HIGHDirectory Traversal in Wiki.jsEPSS 1.8%CVE-2021-43800HIGHAsset directory traversal with some storage modules on WindowsEPSS 1.7%CVE-2021-43856HIGHStored XSS in non-image uploads in Requarks/wikiEPSS 0.9%CVE-2021-43855HIGHStored XSS via SVG in Requarks/wikiEPSS 0.9%CVE-2021-21383HIGHXSS in Wiki.jsEPSS 0.9%CVE-2020-15274MEDIUMStored XSS via search result in Wiki.jsEPSS 0.8%CVE-2022-23654HIGHImproper write access check in Requarks/wikiEPSS 0.7%CVE-2021-43842MEDIUMStored XSS via SVG file upload in Wiki.jsEPSS 0.7%CVE-2021-25993MEDIUMRequarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editorEPSS 0.6%CVE-2020-11051MEDIUMXSS in Wiki.jsEPSS 0.6%CVE-2024-45298MEDIUMDisabled user can bypass lockout by requesting password reset in wiki.jsEPSS 0.4%CVE-2024-34710HIGHWiki.js Stored XSS through Client Side Template Injection EPSS 0.4%CVE-2026-44224HIGHWiki.js: Privilege Escalation via Missing Group Validation in users.updateEPSS 0.4%CVE-2026-92774MEDIUMWiki.js through 2.5.314 Authorization Bypass via GraphQL Tag OmissionEPSS 0.4%CVE-2026-92775HIGHWiki.js through 2.5.314 Server-Side Request Forgery via Image PrefetchEPSS 0.3%CVE-2026-92776HIGHWiki.js through 2.5.314 Path Prefix Matching Authorization BypassEPSS 0.3%