Security: louislam/uptime-kuma
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Missing Origin Validation in WebSocketsGHSA-mj22-23ff-2hrr published
Dec 10, 2023 by louislamModerate -
Authenticated remote code execution via TailscalePingGHSA-hfxh-rjv7-2369 published
Nov 24, 2023 by louislamModerate -
Attribute Injection leading to XSS(Cross-Site-Scripting)GHSA-v4v2-8h88-65qj published
Nov 24, 2023 by louislamModerate -
Persistentent User SessionsGHSA-g9v2-wqcj-j99g published
Oct 9, 2023 by louislamModerate -
Authenticated path traversal via plugin repository name leading to unavailability or data lossGHSA-vr8x-74pm-6vj7 published
Jul 4, 2023 by louislamModerate -
Authenticated remote code execution via malicious plugin installationGHSA-7grx-f945-mj96 published
Jul 4, 2023 by louislamHigh -
Persistent XSS through description in status pageGHSA-wh8j-xr66-f296 published
Feb 13, 2023 by louislamModerate -
Persistent XSS through "new status page --> name"GHSA-553g-fcpf-m3wp published
Feb 13, 2023 by louislamModerate