Stackstorm
6 known vulnerabilities
Top Products
Improper access control in Key-Value RBAC in StackStorm version 3.7.0 didn't check the permissions in Jinja filters, all
Cross-site scripting (XSS) vulnerability in the Web UI of StackStorm versions prior to 3.8.0 allowed logged in users wit
In StackStorm versions prior to 3.6.0, the jinja interpreter was not run in sandbox mode and thus allows execution of un
StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. Thi
In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mecha
Incorrect access control in StackStorm API (st2api) in StackStorm before 2.9.2 and 2.10.x before 2.10.1 allows an attack
Frequently Asked Questions
How many CVEs affect Stackstorm?
Stackstorm has 6 CVE records in our database, including 0 critical and 3 high severity vulnerabilities.
What are the most severe Stackstorm vulnerabilities?
Stackstorm has 0 critical severity (CVSS 9.0+) and 3 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Stackstorm vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Stackstorm products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Stackstorm Vulnerabilities
CyberStrike scans your infrastructure for Stackstorm vulnerabilities and provides real-time remediation guidance.
Get Started