Yf-exam Project
Yf-exam Project Yf-exam: vulnerabilidades y CVE
Yf-exam Project Yf-exam tiene 4 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-26779 | Crítica (9.8) | 1.4% | — | 3 mar 2023 | CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution (RCE). |
| CVE-2023-25403 | Alta (7.5) | 0.65% | — | 3 mar 2023 | CleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass. The program uses a fixed JWT key, and the stored key uses username format characters. Any user who logged in within 24 hours. A token can be forged… |
| CVE-2023-25402 | Alta (7.5) | 0.59% | — | 3 mar 2023 | CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload. There is no restriction on the suffix of the uploaded file, resulting in any file upload. |
| CVE-2023-26780 | Crítica (9.8) | 0.78% | — | 2 mar 2023 | CleverStupidDog yf-exam v 1.8.0 is vulnerable to SQL Injection. |