目標達成 すべての支援者に感謝 — 100%達成しました!

目標: 1000 CNY · 調達済み: 1336 CNY

100%

Capgo 厂商漏洞列表 / CVE 中文分析 83

Capgo 厂商相关 83 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。

本页为 Capgo 相关漏洞聚合索引,聚焦该厂商产品存在的安全缺陷与潜在风险。页面收录了包括配置错误、权限绕过及注入攻击在内的多种漏洞类型,数据覆盖自漏洞首次公开披露至今的历史记录。读者可通过此页面追踪 Capgo 的安全公告动态,深入理解特定弱点在该公司产品中的演变脉络,或快速检索该品牌下各类产品的历史漏洞详情,以辅助风险评估与安全加固。

上位製品 Capgo: Capgo cli
CVE IDタイトルCVSS深刻度公開日
CVE-2026-56300 Capgo - Unauthenticated API Key Validity and Permission Oracle via RPC Functions — CapgoCWE-200 7.5 High2026-06-30
CVE-2026-56249 Capgo - Unauthorized Channel Overwrite and Ownership Takeover via POST /channel Name Collision — CapgoCWE-285 7.6 High2026-06-30
CVE-2026-56247 Capgo - Privilege Escalation via Cross-Scope RBAC Role Assignment — CapgoCWE-266 8.8 High2026-06-30
CVE-2026-56230 Capgo - Broken Object Level Authorization via x-limited-key-id Header — CapgoCWE-639 8.8 High2026-06-30
CVE-2026-56233 Capgo - SSRF and Privilege Escalation via Path Traversal in Builder Upload Proxy — CapgoCWE-22 8.3 High2026-06-30
CVE-2026-56224 Capgo - Login CSRF and Session Fixation via URL Query Parameters — CapgoCWE-384 5.4 Medium2026-06-30
CVE-2026-56219 Capgo - Unauthenticated RBAC Bindings and Email Disclosure via get_org_user_access_rbac NULL-auth Bypass — CapgoCWE-287 7.5 High2026-06-30
CVE-2026-56338 Capgo - Denial of Service in 2FA Email Verification via /auth/v1/otp Endpoint — CapgoCWE-703 5.3 Medium2026-06-24
CVE-2026-56337 Capgo - Information Disclosure via Unauthenticated RPC Function exist_app_v2 — CapgoCWE-200 5.3 Medium2026-06-24
CVE-2026-56302 Capgo - Unsecured Supabase Images Bucket via Missing Row Level Security — CapgoCWE-284 6.5 Medium2026-06-24
CVE-2026-56257 Capgo - Authorization Bypass in App Ownership Transfer via Direct PostgREST Update — CapgoCWE-284 7.1 High2026-06-24
CVE-2026-56256 Capgo - Two-Factor Authentication Bypass via Organization Management API — CapgoCWE-602 7.1 High2026-06-24
CVE-2026-56244 Capgo - Webhook Signing Secret Disclosure via Non-Admin API Key — CapgoCWE-200 7.1 High2026-06-24
CVE-2026-56237 Capgo - Unauthenticated API Key Generation via Client-Side Parameter Manipulation — CapgoCWE-287 9.1 Critical2026-06-24
CVE-2026-56231 Capgo - Broken Object Level Authorization in Build Job Control via jobId Parameter — CapgoCWE-285 7.6 High2026-06-24
CVE-2026-56232 Capgo - Subkey Scope Bypass in middlewareKey via x-limited-key-id Header — CapgoCWE-863 8.8 High2026-06-24
CVE-2026-56223 Capgo - Account Takeover via Cross-Domain SSO Email Assertion in provision-user — CapgoCWE-287 8.7 High2026-06-24
CVE-2026-56322 Capgo - Information Disclosure via Unauthenticated /updates defaultChannel Parameter — CapgoCWE-200 7.5 High2026-06-23
CVE-2026-56243 Capgo - Hashed API Key Enforcement Bypass via PostgREST/RLS Plane — CapgoCWE-288 8.1 High2026-06-23
CVE-2026-56234 Capgo - Password Spraying via Public-Key Accessible Credential Validation Endpoint — CapgoCWE-307 5.3 Medium2026-06-23
CVE-2026-56225 Capgo - Authorization Bypass in API Key Management via App-Limited Keys — CapgoCWE-269 8.3 High2026-06-23
CVE-2026-56222 Capgo - Cross-Organization App Takeover via Mismatched org_id and app_id in /private/role_bindings — CapgoCWE-639 7.2 High2026-06-23
CVE-2026-56324 Capgo - Rate Limit Bypass via User-Controlled device_id Parameter — CapgoCWE-770 8.2 High2026-06-22
CVE-2026-56323 Capgo - Unauthenticated Channel Enumeration and App Oracle via GET /channel_self — CapgoCWE-200 7.5 High2026-06-22
CVE-2026-56321 Capgo - Missing Authentication Middleware on GET /private/role_bindings Endpoint — CapgoCWE-306 5.3 Medium2026-06-22
CVE-2026-56314 Capgo - Deleted Bundle Selection via Missing Deletion Filter in /updates Endpoint — CapgoCWE-672 7.1 High2026-06-22
CVE-2026-56311 Capgo - Unauthenticated Cross-Tenant Disclosure via get_current_plan_max_org RPC — CapgoCWE-285 5.3 Medium2026-06-22
CVE-2026-56306 Capgo - Subkey Enforcement Bypass via x-limited-key-id Header Parsing — CapgoCWE-20 6.4 Medium2026-06-22
CVE-2026-56255 Capgo - Denial of Service via Unlimited Demo App Creation — CapgoCWE-770 4.3 Medium2026-06-22
CVE-2026-56299 Capgo - Denial of Service via Unauthenticated OPTIONS Request to /build/upload Endpoint — CapgoCWE-306 5.3 Medium2026-06-21

本页汇总了 Capgo 厂商截至目前公开的全部 83 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。