Skip to main content

Uptime Kuma Project

5 CVEs vendor

Monthly

CVE-2023-36822 Jul 05, 22:15 npm HIGH POC PATCH This Week

Uptime Kuma, a self-hosted monitoring tool, has a path traversal vulnerability in versions prior to 1.22.1. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Path Traversal Uptime Kuma Uptime Kuma Project
NVD GitHub
CVSS 3.1
8.1
EPSS
1.2%
CVE-2023-36821 Jul 05, 22:15 npm HIGH POC PATCH This Week

Uptime Kuma, a self-hosted monitoring tool, allows an authenticated attacker to install a maliciously crafted plugin in versions prior to 1.22.1, which may lead to remote code execution. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE Node.js Uptime Kuma Uptime Kuma Project
NVD GitHub
CVSS 3.1
8.8
EPSS
2.0%
CVE-2023-26777 Apr 04, 15:15 MEDIUM This Month

Cross Site Scripting vulnerability found in : louislam Uptime Kuma v.1.19.6 and before allows a remote attacker to execute arbitrary commands via the description, title, footer, and incident creation. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Uptime Kuma Uptime Kuma Project
NVD GitHub
CVSS 3.1
6.1
EPSS
0.7%
CVE-2023-25811 Feb 21, 21:15 MEDIUM POC This Month

Uptime Kuma is a self-hosted monitoring tool. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Uptime Kuma Uptime Kuma Project
NVD GitHub
CVSS 3.1
5.4
EPSS
0.5%
CVE-2023-25810 Feb 21, 21:15 MEDIUM This Month

Uptime Kuma is a self-hosted monitoring tool. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Uptime Kuma Uptime Kuma Project
NVD GitHub
CVSS 3.1
5.4
EPSS
0.4%
EPSS 1% CVSS 8.1
HIGH POC PATCH This Week

Uptime Kuma, a self-hosted monitoring tool, has a path traversal vulnerability in versions prior to 1.22.1. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Path Traversal Uptime Kuma Uptime Kuma Project
NVD GitHub
EPSS 2% CVSS 8.8
HIGH POC PATCH This Week

Uptime Kuma, a self-hosted monitoring tool, allows an authenticated attacker to install a maliciously crafted plugin in versions prior to 1.22.1, which may lead to remote code execution. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE Node.js Uptime Kuma +1
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM This Month

Cross Site Scripting vulnerability found in : louislam Uptime Kuma v.1.19.6 and before allows a remote attacker to execute arbitrary commands via the description, title, footer, and incident creation. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Uptime Kuma Uptime Kuma Project
NVD GitHub
EPSS 0% CVSS 5.4
MEDIUM POC This Month

Uptime Kuma is a self-hosted monitoring tool. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Uptime Kuma Uptime Kuma Project
NVD GitHub
EPSS 0% CVSS 5.4
MEDIUM This Month

Uptime Kuma is a self-hosted monitoring tool. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Uptime Kuma Uptime Kuma Project
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy