Dockge.kuma vulnerabilities
We track 2 vulnerabilities in Dockge.kuma products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 11, 2023.
2vulnerabilities
0critical
2high
0exploited
8.3average CVSS score
Latest Dockge.kuma vulnerabilities
- 8.8 High severity
uptime-kuma: Origin Validation Error
Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, the application uses WebSocket (with Socket.io), but it does not verify that the source of communication is valid. This allows third-party website to access the application on
- 7.8 High severity
uptime-kuma: Session Fixation
Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, when a user changes their login password in Uptime Kuma, a previously logged-in user retains access without being logged out. This behavior persists consistently, even after sy