目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

Capgo 厂商漏洞列表 / CVE 中文分析 83

Capgo 厂商相关 83 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

本页为 Capgo 相关漏洞聚合索引，聚焦该厂商产品存在的安全缺陷与潜在风险。页面收录了包括配置错误、权限绕过及注入攻击在内的多种漏洞类型，数据覆盖自漏洞首次公开披露至今的历史记录。读者可通过此页面追踪 Capgo 的安全公告动态，深入理解特定弱点在该公司产品中的演变脉络，或快速检索该品牌下各类产品的历史漏洞详情，以辅助风险评估与安全加固。

上位製品 Capgo: Capgo cli
CVE IDタイトルCVSS深刻度公開日
CVE-2026-56336 Capgo - Information Disclosure via Unauthenticated SSO check-domain Endpoint — CapgoCWE-200 5.3 Medium2026-07-12
CVE-2026-56313 Capgo - Cross-Organization Account Disruption via SSO Prelink Endpoint — CapgoCWE-285 8.1 High2026-07-12
CVE-2026-56308 Capgo - Insufficient Authentication in Email Change Endpoint — CapgoCWE-640 7.3 High2026-07-12
CVE-2026-56281 Capgo - SQL Injection via Unvalidated limit Parameter in Admin Stats Endpoint — CapgoCWE-89 3.8 Low2026-07-12
CVE-2026-56252 Capgo - Scope Isolation Failure in Webhook Test Endpoint — CapgoCWE-863 5.4 Medium2026-07-12
CVE-2026-56241 Capgo - RBAC Demotion Privilege Retention via Stale org_users.user_right — CapgoCWE-285 8.3 High2026-07-12
CVE-2026-56238 Capgo - Unauthenticated Information Disclosure via PostgREST global_stats Endpoint — CapgoCWE-200 7.5 High2026-07-12
CVE-2026-56303 Capgo - Unauthenticated API Key Metadata Disclosure via SECURITY DEFINER RPC Function — CapgoCWE-200 7.5 High2026-07-11
CVE-2026-56240 Capgo - Billing Authorization Bypass via Exhausted Usage Credits — CapgoCWE-285 4.3 Medium2026-07-11
CVE-2026-56335 Capgo - Channel Configuration Mutation via Write-Scoped API Keys — CapgoCWE-284 6.5 Medium2026-07-10
CVE-2026-56312 Capgo - Account Creation Before CAPTCHA Validation in accept_invitation Endpoint — CapgoCWE-287 6.5 Medium2026-07-10
CVE-2026-56329 Capgo - Cross-Tenant Preview Namespace Collision via Non-Bijective Underscore Decoding — CapgoCWE-436 6.4 Medium2026-07-10
CVE-2026-56309 Capgo - Plan Bypass via Unrestricted Attachment Upload Endpoint — CapgoCWE-770 5.4 Medium2026-07-10
CVE-2026-56305 Capgo - Authentication Bypass in Password Change via Missing Current Password Validation — CapgoCWE-620 8.3 High2026-07-10
CVE-2026-56279 Capgo - Information Disclosure via get_orgs_v7 RPC Endpoint — CapgoCWE-862 7.5 High2026-07-10
CVE-2026-56298 Capgo - EXIF Metadata Exposure in App Information Image Upload — CapgoCWE-200 4.3 Medium2026-07-08
CVE-2026-56293 Capgo - Stale Cross-Organization Authorization via Incomplete deploy_history Update in transfer_app() — CapgoCWE-285 5.4 Medium2026-07-08
CVE-2026-56283 Capgo - HTML Injection Leading to Open Redirection in Organization Settings — CapgoCWE-79 5.4 Medium2026-07-08
CVE-2026-56250 Capgo - Arbitrary R2 Object Deletion via Mutable r2_path in app_versions — CapgoCWE-862 7.5 High2026-07-08
CVE-2026-56246 Capgo - Cross-Organization Authorization Bypass via Scoped API Key Privilege Inheritance — CapgoCWE-285 8.1 High2026-07-08
CVE-2026-56220 Capgo - Unauthorized Manifest Insertion via Read-Only Org Member — CapgoCWE-863 6.5 Medium2026-07-08
CVE-2026-56217 Capgo - Encrypted Bundle Policy Bypass via Direct PostgREST Update — CapgoCWE-284 4.3 Medium2026-07-08
CVE-2026-56334 Capgo - Missing UPDATE RLS Policy for Build Status Persistence — CapgoCWE-284 4.3 Medium2026-06-30
CVE-2026-56331 Capgo - Improper Error Handling in Accept Invitation Endpoint via Invalid Magic String — CapgoCWE-209 5.3 Medium2026-06-30
CVE-2026-56333 Capgo - Server-Side Validation Bypass via Direct Browser-Side Organization Security Settings Updates — CapgoCWE-20 4.3 Medium2026-06-30
CVE-2026-56328 Capgo - Integrity Issue in Release Routing via Multiple Public Channels — CapgoCWE-670 6.5 Medium2026-06-30
CVE-2026-56327 Capgo - Unauthenticated Organization Existence Oracle via public.invite_user_to_org RPC — CapgoCWE-203 5.3 Medium2026-06-30
CVE-2026-56320 Capgo - Org/App Scope Mismatch in Device Creation Endpoint — CapgoCWE-285 7.1 High2026-06-30
CVE-2026-56318 Capgo - Information Disclosure via /private/validate_password_compliance Endpoint — CapgoCWE-200 5.3 Medium2026-06-30
CVE-2026-56286 Capgo - Account Deletion Without Password Confirmation — CapgoCWE-306 8.1 High2026-06-30

本页汇总了 Capgo 厂商截至目前公开的全部 83 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。