Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

sirv — Vulnerabilities & Security Advisories 5

Browse all 5 CVE security advisories affecting sirv. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Sirv is an image processing and delivery platform primarily used for website optimization and media management. Historically, it has been vulnerable to classes including remote code execution, cross-site scripting, and privilege escalation vulnerabilities. The platform has faced multiple security incidents, with five CVEs recorded to date, including flaws allowing unauthorized access and manipulation of user content. Sirv's security posture has been impacted by issues in its API endpoints and image processing components, though the company has typically addressed these through patches. The platform's core functionality involves handling user-uploaded media, making input validation and access control critical security areas.

Top products by sirv: Image Optimizer, Resizer and CDN – Sirv
CVE IDTitleCVSSSeverityPublished
CVE-2024-10855 Image Optimizer, Resizer and CDN – Sirv <= 7.3.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion — Image Optimizer, Resizer and CDN – SirvCWE-639 8.1 High2024-11-20
CVE-2024-8964 Image Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload — Image Optimizer, Resizer and CDN – SirvCWE-79 6.4 Medium2024-10-08
CVE-2024-8480 Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload — Image Optimizer, Resizer and CDN – SirvCWE-862 8.8 High2024-09-06
CVE-2024-6392 Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Authenticated(Subscriber+) Missing Authorization to Plugin Settings Update — Image Optimizer, Resizer and CDN – SirvCWE-862 5.4 Medium2024-07-11
CVE-2024-5853 Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload — Image Optimizer, Resizer and CDN – SirvCWE-434 9.9 Critical2024-06-19

This page lists every published CVE security advisory associated with sirv. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.