Vulnerabilidades em sulu
17 resultadosAnálise Vexday
A Sulu apresenta um panorama de risco moderado com 14 CVEs registradas, nenhuma delas sob exploração ativa conhecida, o que reduz a urgência imediata. A ausência de vulnerabilidades críticas (CVSS 9.0+) e a predominância de Cross-Site Scripting (CWE-79) indicam exposições principalmente em contextos web, de impacto mais limitado. Com apenas 1 publicação nos últimos 90 dias, não há sinal de degradação recente da postura de segurança.
CVE-2021-43836HIGHPHP file inclusion in the Sulu admin panelEPSS 2.0%CVE-2021-43835HIGHPrivilege escalation in the Sulu Admin panelEPSS 1.1%CVE-2020-15132MEDIUMReset Password / Login vulnerability in SuluEPSS 1.1%CVE-2021-32737HIGHXSS Injection in Media Collection Title was possibleEPSS 0.7%CVE-2023-39343MEDIUMSulu Observable Response Discrepancy on Admin LoginEPSS 0.6%CVE-2021-41169MEDIUMImproper Neutralization HTML tags in sulu/suluEPSS 0.6%CVE-2024-24807LOWSulu is vulnerable to HTML Injection via Autocomplete SuggestionEPSS 0.5%CVE-2024-27915MEDIUMSulu grants access to pages regardless of role permissionsEPSS 0.4%CVE-2025-47778MEDIUMSulu vulnerable to XXE in SVG File upload InspectorEPSS 0.4%CVE-2024-47617MEDIUMReflected XSS Vulnerability in Sulu Media BundleEPSS 0.4%CVE-2024-47618MEDIUMSulu vulnerable to XSS via uploaded SVGEPSS 0.3%CVE-2026-82394MEDIUMSulu: Fix authorization bypass when creating preview linksEPSS 0.3%CVE-2024-37156MEDIUMTokenController formName not sanitized in hidden inputEPSS 0.3%CVE-2026-34372MEDIUMSulu checks fix permissions for subentities endpointsEPSS 0.3%CVE-2026-82395MEDIUMSulu: Media move/update authorization bypass (IDOR)EPSS 0.2%CVE-2026-45701MEDIUMSulu: Weak Cryptographical usage for API Key generation and Reset TokensEPSS 0.2%CVE-2026-82396MEDIUMSulu: Stored XSS via media download inline-disposition overrideEPSS 0.2%