영향받는 버전 라인
알려진 취약점
| CVE | 제목 | 영향 버전 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|---|
| CVE-2026-44224 | Wiki.js: Privilege Escalation via Missing Group Validation in users.update | * | 8.6 | — | 2026-05-13 | |
| CVE-2024-45298 | Disabled user can bypass lockout by requesting password reset in wiki.js | * | 4.3 | — | 2024-09-19 | |
| CVE-2024-34710 | Wiki.js Stored XSS through Client Side Template Injection | * | 7.1 | — | 2024-05-21 | |
| CVE-2022-1681 | Authentication Bypass Using an Alternate Path or Channel in requarks/wiki | * | 7.2 | — | 2022-05-12 | |
| CVE-2022-23654 | Improper write access check in Requarks/wiki | * | 8.1 | — | 2022-02-23 | |
| CVE-2021-25993 | Requarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editor | ≥ 2.0.0-beta.147 < unspecified ≥ unspecified ≤ 2.5.255 | 5.4 | — | 2021-12-30 | |
| CVE-2021-43855 | Stored XSS via SVG in Requarks/wiki | * | 8.2 | — | 2021-12-28 | |
| CVE-2021-43856 | Stored XSS in non-image uploads in Requarks/wiki | * | 8.2 | — | 2021-12-28 | |
| CVE-2021-43842 | Stored XSS via SVG file upload in Wiki.js | * | 5.4 | — | 2021-12-21 | |
| CVE-2021-43800 | Asset directory traversal with some storage modules on Windows | * | 7.5 | — | 2021-12-07 | |
| CVE-2021-21383 | XSS in Wiki.js | * | 7.6 | — | 2021-03-19 | |
| CVE-2020-15236 | Directory Traversal in Wiki.js | * | 8.6 | — | 2020-10-05 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).