Vulnerabilidades em apprain

33 resultados
Análise Vexday

Apprain apresenta perfil de risco mínimo com apenas 1 vulnerabilidade registrada na base, nenhuma sob exploração ativa (KEV) e sem críticas de CVSS. A fraqueza identificada (CWE-434: upload de arquivo não validado) é antiga e não representa ameaça imediata, mas recomenda-se validação rigorosa de uploads em futuras atualizações.

CVE-2024-58279HIGHappRain CMF 4.0.5 Authenticated Remote Code Execution via Filemanager UploadEPSS 1.0%CVE-2025-41035HIGHPath Traversal vulnerability in appRain CMFEPSS 0.7%CVE-2025-41032HIGHSQL injection vulnerability in appRain CMFEPSS 0.4%CVE-2025-41034HIGHSQL injection vulnerability in appRain CMFEPSS 0.4%CVE-2025-41033HIGHSQL injection vulnerability in appRain CMFEPSS 0.4%CVE-2025-41037MEDIUMStored Cross-Site Scripting vulnerability in appRain CMFEPSS 0.2%CVE-2025-41036MEDIUMStored Cross-Site Scripting vulnerability in appRain CMFEPSS 0.2%CVE-2025-41038MEDIUMStored Cross-Site Scripting vulnerability in appRain CMFEPSS 0.2%CVE-2025-41063MEDIUMReflected Cross-Site Scripting vulnerability in appRain CMFEPSS 0.2%CVE-2025-41050MEDIUMStored Cross-Site Scripting vulnerability in appRain CMFEPSS 0.2%CVE-2025-41041MEDIUMStored Cross-Site Scripting vulnerability in appRain CMFEPSS 0.2%CVE-2025-41057MEDIUMStored Cross-Site Scripting vulnerability in appRain CMFEPSS 0.2%CVE-2025-41049MEDIUMStored Cross-Site Scripting vulnerability in appRain CMFEPSS 0.2%CVE-2025-41052MEDIUMStored Cross-Site Scripting vulnerability in appRain CMFEPSS 0.2%CVE-2025-41047MEDIUMStored Cross-Site Scripting vulnerability in appRain CMFEPSS 0.2%CVE-2025-41042MEDIUMStored Cross-Site Scripting vulnerability in appRain CMFEPSS 0.2%CVE-2025-41056MEDIUMStored Cross-Site Scripting vulnerability in appRain CMFEPSS 0.2%CVE-2025-41040MEDIUMStored Cross-Site Scripting vulnerability in appRain CMFEPSS 0.2%CVE-2025-41048MEDIUMStored Cross-Site Scripting vulnerability in appRain CMFEPSS 0.2%CVE-2025-41051MEDIUMStored Cross-Site Scripting vulnerability in appRain CMFEPSS 0.2%