kirby
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 22, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Kirby: Access to image files and limited access to JSON files outside of the site root via path traversal in the media handling
Kirby: Access to image files outside of the site root via path traversal in the media handling
Kirby: File upload permissions are not checked during processing of chunk data
Kirby: System path exposure from error messages in the REST API
kirby-modules License Key Disclosure via modules/activate Dialog
Kirby is vulnerable to authorization bypass during page, file and user creation via blueprint injection
Path traversal of collection names during file system lookup
Kirby vulnerable to path traversal in the router for PHP's built-in server
Kirby vulnerable to path traversal of snippet names in the `snippet()` helper
Monitor kirby in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.