erudika
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 18, 2022 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Scoold: Forged JWT Accepted as Admin API Token Allowing Unauthorized Access to Sensitive Configuration and Logs
Scoold: Open Redirect in getBackToUrl() allows phishing via domain-prefix startsWith bypass
Scoold: CORS wildcard origin with credentials enabled allows cross-origin authenticated API access from any domain
Scoold: Persistent Admin Takeover by Overwriting the admins Configuration Setting via Forged JWT (missing `jti` validation)
Scoold has an Authenticated Arbitrary Question Overwrite via Client-Controlled postId in POST /questions/ask
Scoold: Cross-Account Feedback Deletion (IDOR)
Semicolon Path Injection on API /api;/config
Business Logic Errors in erudika/para
Cross-site Scripting (XSS) - Generic in erudika/para
Improper handling of Length parameter in erudika/scoold
Monitor erudika in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.