roxy-wi
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 35 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 7, 2021 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Roxy-WI: Path-traversal patch in commit d4d10006 is a no-op (tuple-membership bug)
Roxy-WI: Authentication bypass via 'api' substring in URL + unauthenticated /api/gpt
Roxy-WI: Open redirect on /login?next= via basic-auth userinfo syntax bypass
Roxy-WI: EscapedString validator skips its '..' block when stripping (root cause for several path-traversal/RCE vectors)
Roxy-WI: Authenticated RCE via 'configver' URL parameter (os.system sink in /config/versions/.../save)
Roxy-WI: IDOR — any authenticated user can read another user's full action history
Roxy-WI: SSRF in /smon/agent/<endpoint>/<server_ip> reachable to cloud metadata IPs
Roxy-WI: Stored XSS in log viewer (wrap_line/highlight_word produce unescaped HTML)
Roxy-WI: LDAP injection in /user/ldap/<username> (admin-only)
Roxy-WI: Authenticated RCE on every managed HAProxy load balancer via `option` field config injection in section save
Monitor roxy-wi in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.