getkirby
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 44 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 13, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Kirby: System API endpoint leaks license data and installed version to authenticated users
Kirby: User avatar creation, replacement and deletion are not gated by user update permissions
Kirby: Read access to site, user and role information is not gated by permissions
Kirby: `pages.access/list` and `files.access/list` permissions are not consistently checked in the REST API and changes dialog
Kirby is vulnerable to authorization bypass during page, file and user creation via blueprint injection
Kirby's page creation API bypasses the changeStatus permission check via unfiltered isDraft parameter
Kirby has Server-Side Template Injection (SSTI) via double template resolution in option rendering
Kirby has XML injection in its XML creator toolkit
Kirby is missing permission checks in the content changes API
Monitor getkirby in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.