Uptime Kuma vulnerabilities

2 known vulnerabilities in Uptime Kuma from Uptime-kuma Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  uptime-kuma: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-36822Jul 5, 2023LouislamEPSS 1.21%

  Uptime Kuma, a self-hosted monitoring tool, has a path traversal vulnerability in versions prior to 1.22.1. Uptime Kuma allows authenticated users to install plugins from an official list of plugins. This feature is currently disabled in the web interface, but

• 8.8 High severity

  Uptime Kuma, a self-hosted monitoring tool, allows an authenticated attacker to install a…

  CVE-2023-36821Jul 5, 2023LouislamEPSS 2.02%

  Uptime Kuma, a self-hosted monitoring tool, allows an authenticated attacker to install a maliciously crafted plugin in versions prior to 1.22.1, which may lead to remote code execution. Uptime Kuma allows authenticated users to install plugins from an officia