Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Requarks — Vulnerabilities & Security Advisories 17

Browse all 17 CVE security advisories affecting Requarks. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Requarks is a collaborative platform enabling wiki and documentation creation with its Wiki.js software. Historically, the project has faced multiple critical vulnerabilities including remote code execution, cross-site scripting, and privilege escalation flaws. Security researchers have identified authentication bypass issues and insufficient input validation across its components. While no major public security incidents have been widely documented, the 13 CVEs on record highlight recurring concerns around access controls and sanitization. The platform's extensive plugin architecture and customization options introduce additional attack surfaces that require careful configuration and regular updates to mitigate potential exploitation risks.

Top products by Requarks: wiki Wiki.js requarks/wiki
CVE ID Title CVSS Severity Published
CVE-2026-92776 Wiki.js through 2.5.314 Path Prefix Matching Authorization Bypass — Wiki.js CWE-863 8.1 High 2026-09-16
CVE-2026-92775 Wiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetch — Wiki.js CWE-918 6.5 Medium 2026-09-16
CVE-2026-92774 Wiki.js through 2.5.314 Authorization Bypass via GraphQL Tag Omission — Wiki.js CWE-863 4.3 Medium 2026-09-16
CVE-2026-44224 Wiki.js: Privilege Escalation via Missing Group Validation in users.update — wiki CWE-269 - - 2026-05-12
CVE-2024-45298 Disabled user can bypass lockout by requesting password reset in wiki.js — wiki CWE-670 4.3 Medium 2024-09-18
CVE-2024-34710 Wiki.js Stored XSS through Client Side Template Injection — wiki CWE-1336 7.1 High 2024-05-20
CVE-2022-1681 Authentication Bypass Using an Alternate Path or Channel in requarks/wiki — requarks/wiki CWE-288 7.2 - 2022-05-12
CVE-2022-23654 Improper write access check in Requarks/wiki — wiki CWE-287 8.1 High 2022-02-22
CVE-2021-25993 Requarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editor — wiki CWE-79 5.4 Medium 2021-12-29
CVE-2021-43855 Stored XSS via SVG in Requarks/wiki — wiki CWE-79 8.2 High 2021-12-27
CVE-2021-43856 Stored XSS in non-image uploads in Requarks/wiki — wiki CWE-79 8.2 High 2021-12-27
CVE-2021-43842 Stored XSS via SVG file upload in Wiki.js — wiki CWE-79 5.4 Medium 2021-12-20
CVE-2021-43800 Asset directory traversal with some storage modules on Windows — wiki CWE-22 7.5 High 2021-12-06
CVE-2021-21383 XSS in Wiki.js — wiki CWE-79 7.6 High 2021-03-18
CVE-2020-15274 Stored XSS via search result in Wiki.js — wiki.js CWE-79 5.8 Medium 2020-10-26
CVE-2020-15236 Directory Traversal in Wiki.js — wiki CWE-22 8.6 High 2020-10-05
CVE-2020-11051 XSS in Wiki.js — Wiki.js CWE-79 6.9 Medium 2020-05-05

This page lists every published CVE security advisory associated with Requarks. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.