Uptime-kuma_project Uptime-kuma
4 CVEs affecting Uptime-kuma_project Uptime-kuma. Latest disclosed: 2023-07-05. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-36821 | High | 8.8 | 2023-07-05 | Uptime Kuma, a self-hosted monitoring tool, allows an authenticated attacker to install a maliciously crafted plugin in versions prior to 1.22.1, which may lea… |
CVE-2023-36822 | Medium | 6.5 | 2023-07-05 | Uptime Kuma, a self-hosted monitoring tool, has a path traversal vulnerability in versions prior to 1.22.1. Uptime Kuma allows authenticated users to install p… |
CVE-2023-25811 | Medium | 6.3 | 2023-02-21 | Uptime Kuma is a self-hosted monitoring tool. In versions prior to 1.20.0 the Uptime Kuma `name` parameter allows a persistent XSS attack. Users are advised to… |
CVE-2023-25810 | Medium | 6.3 | 2023-02-21 | Uptime Kuma is a self-hosted monitoring tool. In versions prior to 1.20.0 the Uptime Kuma status page allows a persistent XSS attack. Users are advised to upgr… |