Vendors / kuaifan Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now kuaifan records in CISA KEV No kuaifan vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 57
DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog::checkDialog() that skips the membership check for dialogs with group_type 'okr'.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00288 · Published 2026-10-16 · No fix listed CWE-639
Priority MEDIUM 57
A vulnerability was found in kuaifan DooTask up to 1.2.49.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00325 · Published 2025-09-21 · No fix listed CWE-74
Priority MEDIUM 44
A issue was discovered in KuaiFanCMS 5.0.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01212 · Published 2019-08-07 · No fix listed CWE-94
Priority LOW 31
KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the html_url parameter of the chakanhtml.module.php file.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0089 · Published 2021-06-11 · No fix listed CWE-88
Open these records in search → All records by CVSS severity
Critical1 High0 Medium3 Low0 No CVSS0