Vulnerabilidades em SaturdayDrive
9 resultadosAnálise Vexday
A SaturdayDrive apresenta 9 vulnerabilidades conhecidas, com 5 publicadas nos últimos 90 dias, indicando atividade recente de descoberta. Nenhuma está sob exploração ativa até o momento, mas 2 classificadas como críticas e a prevalência de CWE-79 (Cross-Site Scripting) requerem atenção em ambientes web. O padrão de descobertas recentes sugere que o risco pode evoluir se essas vulnerabilidades não forem remediadas nas próximas atualizações.
CVE-2026-0740CRITICALNinja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File UploadEPSS 62.9%CVE-2022-0888CRITICALNinja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File UploadEPSS 39.4%CVE-2022-0889HIGHNinja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2026-15160MEDIUMNinja Forms - Excel Export <= 3.3.6 - Missing Authorization to Authenticated (Subscriber+) XLS Write via Path TraversalEPSS 0.7%CVE-2026-13369HIGHNinja Forms - File Uploads <= 3.3.29 - Unauthenticated Arbitrary File Read via File Upload Field 'files[].data.file_path' ParameterEPSS 0.6%CVE-2024-1596HIGHNinja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File UploadEPSS 0.4%CVE-2026-12557MEDIUMNinja Forms - File Uploads <= 3.3.29 - Missing Authorization to Unauthenticated Log Disclosure and Deletion via debug-log/delete-all and debug-log/get-all REST EndpointsEPSS 0.4%CVE-2026-15159MEDIUMNinja Forms - Excel Export <= 3.3.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Data Disclosure via 'spreadsheet_export_form_id' ParameterEPSS 0.3%CVE-2026-15161MEDIUMNinja Forms - Excel Export <= 3.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'filter' ParameterEPSS 0.3%