既知の脆弱性
| CVE | タイトル | 影響を受けるバージョン | CVSS | 悪用 | EPSS | 公開日 |
|---|---|---|---|---|---|---|
| CVE-2024-57190 | Erxes <1.6.1 is vulnerable to Incorrect Access Control. An attacker can bypass authentication by providing a "... | * | 9.8 | — | 2025-06-10 | |
| CVE-2024-57189 | In Erxes <1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal v... | * | 5.4 | — | 2025-06-10 | |
| CVE-2024-57186 | In Erxes <1.6.2, an unauthenticated attacker can read arbitrary files from the system using a Path Traversal v... | * | 5.4 | — | 2025-06-10 |
データ:CVE List(CVE® Program)、NVD、CISA KEV、FIRST EPSS(EPSS については https://www.first.org/epss を参照)、endoflife.date。ソフトウェア一覧:awesome-selfhosted(CC BY-SA 3.0)。