Venueless
Venueless: vulnerabilidades y CVE
Venueless tiene 4 vulnerabilidades publicadas, 4 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses4
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-82838 | Media (6.4) | 0.40% | — | 31 ago 2026 | The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set. |
| CVE-2026-12863 | Media (5.1) | 0.35% | — | 22 jun 2026 | An unvalidated redirect was contained in Venueless' social login functionality and could be exploited for phishing using trusted domains. |
| CVE-2026-5599 | Alta (7.3) | 0.38% | — | 5 abr 2026 | A user with API access and "manage users" permission in any venueless world is able to trigger deletion of user accounts in other worlds. |
| CVE-2026-4982 | Alta (7.3) | 0.38% | — | 27 mar 2026 | A user with permission "update world" in any Venueless world is able to exfiltrate chat messages from direct messages or channels in other worlds on the same server due to a bug in the reporting feature. The… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.