Vendorsuptime-kuma Projectuptime-kumaany version
Vulnerabilities

uptime-kuma Project Uptime Kuma any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2023-36821
Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation
Published 2023-07-05 · Modified
8.8EPSS 0.020
CVE-2023-36822
Uptime Kuma authenticated path traversal via plugin repository name may lead to unavailability or data loss
Published 2023-07-05 · Modified
8.1EPSS 0.012
CVE-2023-25811
Persistent Cross site scripting (XSS) in Uptime Kuma
Published 2023-02-21 · Modified
6.3EPSS 0.005
CVE-2023-25810
Persistent Cross site scripting (XSS) through description in status page in Uptime Kuma
Published 2023-02-21 · Modified
6.3EPSS 0.004