Vulnerabilidades do Vvveb Vvvebjs

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Vvveb Vvvebjs: 4 registro(s), com versões afetadas e correções.
cpe:2.3:a:vvveb:vvvebjs

CVE-2024-27480 Crítica · 9.8 CWE-434 29/12/2025

Unrestricted Upload of File with Dangerous Type em Vvveb Vvvebjs

givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.

CVE-2024-25183 Alta · 7.5 CWE-22 29/12/2025

Path Traversal em Vvveb Vvvebjs

givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.

CVE-2024-25182 Crítica · 9.8 CWE-434 29/12/2025

Unrestricted Upload of File with Dangerous Type em Vvveb Vvvebjs

givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.

CVE-2024-25181 Crítica · 9.1 CWE-918 29/12/2025

Server-Side Request Forgery (SSRF) em Vvveb Vvvebjs

A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side Request Forgery (SSRF) and arbitrary file reading. The vulnerability stems from improper handling of user-supplied URLs in the "file_get_contents" function within the "save.php" file.