Vulnerabilidades em redaxo
12 resultadosAnálise Vexday
Redaxo apresenta um perfil de risco baixo com apenas 4 vulnerabilidades registradas, nenhuma sob ataque ativo ou classificada como crítica. A fraqueza dominante é XSS (CWE-79), típica em aplicações web, mas sem evidência de exploração em campo e sem novas descobertas nos últimos 90 dias.
CVE-2026-21857HIGHRedaxo has Path Traversal in Backup Addon Leading to Arbitrary File ReadEPSS 0.5%CVE-2026-53599HIGHRedaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlersEPSS 0.5%CVE-2018-25353HIGHRedaxo CMS Mediapool Addon 5.5.1 Arbitrary File UploadEPSS 0.5%CVE-2024-13209MEDIUMRedaxo CMS Structure Management Page index.php cross site scriptingEPSS 0.4%CVE-2025-27412MEDIUMREDAXO allows Authenticated Reflected Cross Site Scripting - packages installationEPSS 0.3%CVE-2025-27411MEDIUMREDAXO allows Arbitrary File Upload in the mediapool pageEPSS 0.3%CVE-2026-62998MEDIUMREDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column EnumerationEPSS 0.3%CVE-2025-66026MEDIUMREDAXO is Vulnerable to Reflected XSS in Mediapool Info Banner via args[types]EPSS 0.3%CVE-2026-63001MEDIUMREDAXO: Stored XSS via Unescaped Media Manager Type Name in `mediaIsInUse()`EPSS 0.2%CVE-2026-63002MEDIUMREDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem FilenamesEPSS 0.2%CVE-2016-20053MEDIUMRedaxo CMS 5.2 Cross-Site Request Forgery via users endpointEPSS 0.1%CVE-2026-63000MEDIUMREDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon UpdatesEPSS 0.1%