Vulnerabilidades em drakkan
11 resultadosAnálise Vexday
O fornecedor drakkan apresenta 8 vulnerabilidades catalogadas, nenhuma delas sob ataque ativo ou com severidade crítica, o que reduz o risco imediato. A fraqueza dominante é contaminação de caminho (CWE-22), típica de problemas de validação de entrada. A ausência de publicações recentes sugere que o risco é estável e não em evolução acelerada.
CVE-2025-24366HIGHInsufficient sanitization of user provided rsync command in SFTPGoEPSS 0.7%CVE-2024-52309MEDIUMSFTPGo allows administrators to restrict command execution from the EventManagerEPSS 0.6%CVE-2022-39220MEDIUMXSS Vulnerabilities in WebClientEPSS 0.6%CVE-2022-36071HIGHRecovery codes abuse in SFTPGoEPSS 0.5%CVE-2026-30914MEDIUMSFTPGo has a Path Traversal and Permission Bypass via Path Normalization DiscrepancyEPSS 0.5%CVE-2024-52801MEDIUMBrute force takeover of OpenID Connect session cookies in sftpgoEPSS 0.4%CVE-2026-49244MEDIUMSFTPGo: Path confinement bypass in public browsable share partial ZIP downloadEPSS 0.4%CVE-2026-30915MEDIUMSFTPGo improperly sanitizes placeholders in group home directories/key prefixesEPSS 0.3%CVE-2024-37897MEDIUMInsufficient access control for password reset in sftpgoEPSS 0.3%CVE-2026-49245LOWSFTPGo: Stored XSS via inline parameter on public shares and user file downloadEPSS 0.2%CVE-2026-10031LOWSFTPGo 2.7.4 Permission Bypass via Symbolic Link CreationEPSS 0.2%