基础信息
项目名称：Chinchilla-Software-Com/CQRS
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1716649719782572032/1716649719832903680
此报告由Murphysec提供
漏洞列表
| 漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
|---|---|---|---|---|
| Bootstrap 跨站脚本漏洞 | XSS | MPS-2018-9640 | CVE-2018-14040 | 中危 |
| Bootstrap 跨站脚本漏洞 | XSS | MPS-2018-9642 | CVE-2018-14042 | 中危 |
| Bootstrap跨站脚本漏洞 | XSS | MPS-2019-0181 | CVE-2018-20676 | 中危 |
| Bootstrap跨站脚本漏洞 | XSS | MPS-2019-0182 | CVE-2018-20677 | 中危 |
| Bootstrap 存在跨站脚本漏洞 | XSS | MPS-2019-1791 | CVE-2019-8331 | 中危 |
缺陷组件
| 组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
|---|---|---|---|---|
| bootstrap | 3.0.0 | 4.3.1 | 间接依赖 | 建议修复 |
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| non-standard | 4 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| cdmdotnet.Logging.Azure | 1.2.91.71 | 间接依赖 | nuget |
| Microsoft.ApplicationInsights.Agent.Intercept | 2.0.6 | 间接依赖 | nuget |
| Microsoft.AspNet.Web.Optimization | 1.0.0 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.EventBus | 1.601.882 | 间接依赖 | nuget |
| Microsoft.AspNet.Mvc | 3.0.20105.1 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.CommandBus | 1.601.882 | 间接依赖 | nuget |
| knockoutjs | 2.2.0 | 间接依赖 | nuget |
| Microsoft.AspNet.WebPages.OAuth | 2.0.20710.0 | 间接依赖 | nuget |
| CommonServiceLocator | 1.0 | 间接依赖 | nuget |
| cdmdotnet.Logging.Azure.ApplicationInsights | 1.2.96.73 | 间接依赖 | nuget |
| Microsoft.AspNet.Razor | 2.0.20715.0 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.EventBus | 1.601.954 | 间接依赖 | nuget |
| popper.js | 1.14.0 | 间接依赖 | nuget |
| Microsoft.AspNet.SignalR.Core | 2.2.1 | 间接依赖 | nuget |
| cdmdotnet.StateManagement | 3.0.9.7 | 间接依赖 | nuget |
| Microsoft.AspNet.WebApi.WebHost | 5.2.3 | 间接依赖 | nuget |
| Ninject | 3.2.0.0 | 间接依赖 | nuget |
| Cqrs.WebApi | 2.2.1405.647 | 间接依赖 | nuget |
| Microsoft.AspNet.Cors | 5.0.0 | 间接依赖 | nuget |
| Owin | 1.0 | 间接依赖 | nuget |
| Cqrs.Modelling | 1.601.917 | 间接依赖 | nuget |
| jQuery.Validation | 1.9.0.1 | 间接依赖 | nuget |
| Microsoft.AspNet.Identity.EntityFramework | 2.2.1 | 间接依赖 | nuget |
| valueinjecter | 2.3.3 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.EventStore | 1.500.523.412 | 间接依赖 | nuget |
| AngularJS.Core | 1.6.4 | 间接依赖 | nuget |
| Microsoft.ApplicationInsights.WindowsServer | 2.2.0 | 间接依赖 | nuget |
| Cqrs.Ninject.Azure.WebJobs | 2.2.1440.678 | 间接依赖 | nuget |
| Microsoft.ApplicationInsights | 2.2.0 | 间接依赖 | nuget |
| Microsoft.AspNet.WebApi.Client | 4.0.20710.0 | 间接依赖 | nuget |
| Microsoft.AspNet.WebApi.OData | 4.0.1 | 间接依赖 | nuget |
| System.Spatial | 5.8.4 | 间接依赖 | nuget |
| Microsoft.ApplicationInsights.PerfCounterCollector | 2.2.0 | 间接依赖 | nuget |
| Ninject.Web.WebApi | 3.2.4.0 | 间接依赖 | nuget |
| Microsoft.Owin.Security.OAuth | 3.0.1 | 间接依赖 | nuget |
| EntityFramework | 6.1.3 | 间接依赖 | nuget |
| Microsoft.Web.WebJobs.Publish | 1.0.13 | 间接依赖 | nuget |
| WindowsAzure.Storage | 4.3.0 | 间接依赖 | nuget |
| Ninject.Web.Common.WebHost | 3.2.0.0 | 间接依赖 | nuget |
| Unity | 2.1.505.0 | 间接依赖 | nuget |
| WebActivatorEx | 2.1.0 | 间接依赖 | nuget |
| Cqrs.Ninject | 1.500.523.412 | 间接依赖 | nuget |
| Cqrs.Azure.ConfigurationManager | 2.2.1405.647 | 间接依赖 | nuget |
| cdmdotnet.StateManagement | 3.0.13.9 | 间接依赖 | nuget |
| WindowsAzure.ServiceBus | 2.8.2 | 间接依赖 | nuget |
| Microsoft.AspNet.WebApi.HelpPage | 5.2.3 | 间接依赖 | nuget |
| Microsoft.Owin | 4.2.2 | 间接依赖 | nuget |
| WebActivatorEx | 2.0 | 间接依赖 | nuget |
| Microsoft.Net.Http | 2.0.20710.0 | 间接依赖 | nuget |
| Microsoft.AspNet.Web.Optimization | 1.1.3 | 间接依赖 | nuget |
| Cqrs.Ninject.ServiceHost | 1.601.790 | 间接依赖 | nuget |
| Microsoft.AspNet.WebApi.OData | 4.0.30506 | 间接依赖 | nuget |
| Cqrs | 2.1.1347.590 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.CommandBus | 1.601.917 | 间接依赖 | nuget |
| Cqrs.Ninject.ServiceHost | 2.1.1347.590 | 间接依赖 | nuget |
| TransientFaultHandling.Core | 5.1.1209.0 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.CommandBus | 1.601.790 | 间接依赖 | nuget |
| Cqrs.Modelling | 1.601.882 | 间接依赖 | nuget |
| Microsoft.Owin.Security.Cookies | 4.2.2 | 间接依赖 | nuget |
| Ninject.Extensions.Wcf | 3.2.2.0 | 间接依赖 | nuget |
| WebGrease | 1.3.0 | 间接依赖 | nuget |
| Cqrs | 2.2.1405.647 | 间接依赖 | nuget |
| routedebugger | 2.1.5 | 间接依赖 | nuget |
| Ninject.Web.Common | 3.2.0.0 | 间接依赖 | nuget |
| Microsoft.Data.Services.Client | 5.6.2 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.CommandBus | 1.601.836 | 间接依赖 | nuget |
| Cqrs.Ninject | 2.2.1440.678 | 间接依赖 | nuget |
| EventStore.Client | 3.0.2 | 间接依赖 | nuget |
| WebActivatorEx | 2.0.3 | 间接依赖 | nuget |
| DotNetOpenAuth.Core | 4.1.4.12333 | 间接依赖 | nuget |
| Microsoft.AspNet.SignalR.JS | 2.2.2 | 间接依赖 | nuget |
| Cqrs.Ninject.ServiceHost | 1.601.882 | 间接依赖 | nuget |
| jQuery.Validation | 1.11.1 | 间接依赖 | nuget |
| Microsoft.AspNet.SignalR.JS | 2.2.1 | 间接依赖 | nuget |
| Microsoft.AspNet.WebPages | 3.2.3 | 间接依赖 | nuget |
| bootstrap | 4.3.1 | 间接依赖 | nuget |
| Cqrs.WebApi | 2.1.1347.590 | 间接依赖 | nuget |
| Microsoft.Azure.WebJobs.Core | 1.1.2 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.EventBus | 2.1.1347.590 | 间接依赖 | nuget |
| Cqrs | 1.500.523.412 | 间接依赖 | nuget |
| Cqrs | 2.2.1440.678 | 间接依赖 | nuget |
| Microsoft.Owin.Security.MicrosoftAccount | 3.0.1 | 间接依赖 | nuget |
| Microsoft.AspNet.WebApi.OData | 4.0.0 | 间接依赖 | nuget |
| Cqrs.Ninject.Azure.Wcf | 2.2.1440.678 | 间接依赖 | nuget |
| EnterpriseLibrary.WindowsAzure.TransientFaultHandling | 5.1.1212.0 | 间接依赖 | nuget |
| DotNetOpenAuth.OpenId.Core | 4.1.4.12333 | 间接依赖 | nuget |
| Microsoft.AspNet.Providers.LocalDB | 1.1 | 间接依赖 | nuget |
| Microsoft.AspNet.Identity.Core | 2.2.1 | 间接依赖 | nuget |
| Cqrs.Azure.ServiceBus | 2.2.1440.678 | 间接依赖 | nuget |
| EnterpriseLibrary.Common | 5.0.505.0 | 间接依赖 | nuget |
| cdmdotnet.Logging | 1.2.91.71 | 间接依赖 | nuget |
| Microsoft.AspNet.WebPages.Data | 2.0.20710.0 | 间接依赖 | nuget |
| Respond | 1.2.0 | 间接依赖 | nuget |
| Microsoft.AspNet.SignalR.Core | 2.2.2 | 间接依赖 | nuget |
| Microsoft.AspNet.WebApi.Client | 5.2.3 | 间接依赖 | nuget |
| Microsoft.Data.Services.Client | 5.8.4 | 间接依赖 | nuget |
| jQuery | 1.8.2 | 间接依赖 | nuget |
| Unity.Interception | 2.1.505.0 | 间接依赖 | nuget |
| Microsoft.ApplicationInsights.TraceListener | 2.2.0 | 间接依赖 | nuget |
| System.Spatial | 5.2.0 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.CommandBus | 1.500.523.412 | 间接依赖 | nuget |
| Microsoft.ApplicationInsights.DependencyCollector | 2.2.0 | 间接依赖 | nuget |
| Microsoft.Data.OData | 5.8.4 | 间接依赖 | nuget |
| Ninject.MVC3 | 3.2.1.0 | 间接依赖 | nuget |
| Cqrs.Ninject.WebApi | 2.2.1405.647 | 间接依赖 | nuget |
| Microsoft.AspNet.WebApi | 4.0.30506.0 | 间接依赖 | nuget |
| Cqrs.Ninject | 2.1.1347.590 | 间接依赖 | nuget |
| Cqrs.Ninject.Azure.ServiceBus.EventBus | 2.2.1440.678 | 间接依赖 | nuget |
| Cqrs.Ninject | 2.2.1405.647 | 间接依赖 | nuget |
| Microsoft.Owin | 3.0.1 | 间接依赖 | nuget |
| Microsoft.Owin.Security | 2.1.0 | 间接依赖 | nuget |
| Cqrs.Modelling | 1.601.864 | 间接依赖 | nuget |
| Cqrs.Ninject.WebApi | 2.1.1347.590 | 间接依赖 | nuget |
| DotNetOpenAuth.OAuth.Consumer | 4.1.4.12333 | 间接依赖 | nuget |
| DotNetOpenAuth.OAuth.Core | 4.1.4.12333 | 间接依赖 | nuget |
| Cqrs | 1.601.954 | 间接依赖 | nuget |
| Cqrs.Ninject | 1.601.954 | 间接依赖 | nuget |
| Microsoft.CodeDom.Providers.DotNetCompilerPlatform | 1.0.0 | 间接依赖 | nuget |
| jQuery.Validation | 1.10.0 | 间接依赖 | nuget |
| Cqrs.Ninject.Azure.ServiceBus.CommandBus | 2.2.1405.647 | 间接依赖 | nuget |
| Modernizr | 2.6.2 | 间接依赖 | nuget |
| Microsoft.AspNet.Razor | 1.0.20105.408 | 间接依赖 | nuget |
| Microsoft.Owin.Cors | 3.0.1 | 间接依赖 | nuget |
| jQuery | 1.7.1.1 | 间接依赖 | nuget |
| Cqrs.Web.Mvc | 2.1.1345.589 | 间接依赖 | nuget |
| AngularJS.Route | 1.6.4 | 间接依赖 | nuget |
| WebGrease | 1.5.2 | 间接依赖 | nuget |
| Cqrs | 1.601.836 | 间接依赖 | nuget |
| Cqrs | 1.601.917 | 间接依赖 | nuget |
| Microsoft.AspNet.Providers.Core | 1.1 | 间接依赖 | nuget |
| Microsoft.AspNet.Mvc | 4.0.20710.0 | 间接依赖 | nuget |
| Cqrs.Azure.ServiceBus | 2.2.1405.647 | 间接依赖 | nuget |
| Cqrs.Ninject | 1.601.836 | 间接依赖 | nuget |
| Microsoft.WindowsAzure.ConfigurationManager | 3.2.3 | 间接依赖 | nuget |
| Microsoft.AspNet.WebPages.WebData | 2.0.20710.0 | 间接依赖 | nuget |
| Microsoft.AspNet.WebPages | 1.0.20105.408 | 间接依赖 | nuget |
| Cqrs | 1.601.790 | 间接依赖 | nuget |
| DotNetOpenAuth.AspNet | 4.1.4.12333 | 间接依赖 | nuget |
| Microsoft.Owin.Security.Twitter | 3.0.1 | 间接依赖 | nuget |
| Microsoft.jQuery.Unobtrusive.Validation | 2.0.30116.0 | 间接依赖 | nuget |
| jQuery | 1.10.2 | 间接依赖 | nuget |
| Cqrs.Ninject.Azure.ServiceBus.CommandBus | 2.2.1440.678 | 间接依赖 | nuget |
| Microsoft.AspNet.Cors | 5.2.3 | 间接依赖 | nuget |
| EntityFramework | 5.0.0 | 间接依赖 | nuget |
| Microsoft.Data.Edm | 5.6.2 | 间接依赖 | nuget |
| AngularJS.Animate | 1.6.4 | 间接依赖 | nuget |
| Microsoft.jQuery.Unobtrusive.Ajax | 2.0.30116.0 | 间接依赖 | nuget |
| Cqrs.Ninject | 1.601.882 | 间接依赖 | nuget |
| jQuery | 1.6.4 | 间接依赖 | nuget |
| Cqrs.Ninject.ServiceHost | 2.2.1405.647 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.EventBus | 1.601.917 | 间接依赖 | nuget |
| Microsoft.AspNet.Mvc | 5.2.3 | 间接依赖 | nuget |
| Modernizr | 2.5.3 | 间接依赖 | nuget |
| RequireJS | 2.3.3 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.CommandBus | 2.1.1347.590 | 间接依赖 | nuget |
| Microsoft.Owin.Host.SystemWeb | 2.1.0 | 间接依赖 | nuget |
| NUnit | 2.6.4 | 间接依赖 | nuget |
| Cqrs.Ninject.Azure.ServiceBus.EventBus | 2.2.1405.647 | 间接依赖 | nuget |
| Microsoft.AspNet.WebApi | 4.0.20710.0 | 间接依赖 | nuget |
| Microsoft.Owin.Security.Google | 3.0.1 | 间接依赖 | nuget |
| Microsoft.Azure.WebJobs | 1.1.2 | 间接依赖 | nuget |
| Microsoft.Web.Infrastructure | 1.0.0.0 | 间接依赖 | nuget |
| jQuery | 3.0.0 | 间接依赖 | nuget |
| Microsoft.Owin.Security.Cookies | 3.0.1 | 间接依赖 | nuget |
| Cqrs | 1.601.864 | 间接依赖 | nuget |
| Microsoft.AspNet.WebApi | 5.2.3 | 间接依赖 | nuget |
| Newtonsoft.Json | 6.0.8 | 间接依赖 | nuget |
| Cqrs | 1.601.882 | 间接依赖 | nuget |
| cdmdotnet.AutoMapper | 1.0.16.9 | 间接依赖 | nuget |
| Cqrs.Ninject | 1.601.917 | 间接依赖 | nuget |
| Ninject | 3.2.2.0 | 间接依赖 | nuget |
| Cqrs.Azure.WebJobs | 2.2.1405.647 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.CommandBus | 1.601.954 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.EventBus | 1.601.864 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.EventStore | 1.601.790 | 间接依赖 | nuget |
| Cqrs.Ninject.ServiceHost | 1.601.864 | 间接依赖 | nuget |
| cdmdotnet.Logging | 1.0.24.24 | 间接依赖 | nuget |
| Cqrs.Ninject | 1.601.790 | 间接依赖 | nuget |
| Cqrs.Azure.ConfigurationManager | 2.1.1347.590 | 间接依赖 | nuget |
| Microsoft.AspNet.Razor | 3.2.3 | 间接依赖 | nuget |
| Cqrs.Ninject.ServiceHost | 1.601.954 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.EventBus | 1.500.523.412 | 间接依赖 | nuget |
| Microsoft.AspNet.WebApi.WebHost | 4.0.20710.0 | 间接依赖 | nuget |
| Microsoft.Owin.Security.Facebook | 3.0.1 | 间接依赖 | nuget |
| Microsoft.AspNet.WebPages | 2.0.20710.0 | 间接依赖 | nuget |
| Microsoft.AspNet.WebApi.Cors | 5.2.3 | 间接依赖 | nuget |
| cdmdotnet.Logging.Azure | 1.2.96.73 | 间接依赖 | nuget |
| Antlr | 3.4.1.9004 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.EventBus | 1.601.790 | 间接依赖 | nuget |
| mscoree.dll | 间接依赖 | ||
| Microsoft.AspNet.Mvc.FixedDisplayModes | 1.0.0 | 间接依赖 | nuget |
| Cqrs.Modelling | 1.601.836 | 间接依赖 | nuget |
| Cqrs.Ninject.Azure.Wcf | 2.2.1405.647 | 间接依赖 | nuget |
| Microsoft.Data.Edm | 5.8.4 | 间接依赖 | nuget |
| Cqrs.Azure.WebJobs | 2.2.1440.678 | 间接依赖 | nuget |
| Cqrs.Ninject.Azure.WebJobs | 2.2.1405.647 | 间接依赖 | nuget |
| jQuery.UI.Combined | 1.8.20.1 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.CommandBus | 1.601.864 | 间接依赖 | nuget |
| cdmdotnet.AutoMapper | 1.0.10.8 | 间接依赖 | nuget |
| Microsoft.jQuery.Unobtrusive.Validation | 3.2.3 | 间接依赖 | nuget |
| DotNetOpenAuth.OpenId.RelyingParty | 4.1.4.12333 | 间接依赖 | nuget |
| Cqrs.Azure.ConfigurationManager | 2.2.1440.678 | 间接依赖 | nuget |
| cdmdotnet.Logging.Azure.ApplicationInsights | 1.2.91.71 | 间接依赖 | nuget |
| Microsoft.Owin.Security | 3.0.1 | 间接依赖 | nuget |
| Microsoft.Owin.Host.SystemWeb | 3.0.1 | 间接依赖 | nuget |
| Newtonsoft.Json | 11.0.2 | 间接依赖 | nuget |
| cdmdotnet.Performance | 1.0.5.8 | 间接依赖 | nuget |
| Newtonsoft.Json | 9.0.1 | 间接依赖 | nuget |
| Cqrs.Ninject.InProcess.EventBus | 1.601.836 | 间接依赖 | nuget |
| System.Spatial | 5.6.2 | 间接依赖 | nuget |
| Microsoft.AspNet.WebApi.Core | 4.0.20710.0 | 间接依赖 | nuget |
| Cqrs.Ninject.ServiceHost | 1.601.917 | 间接依赖 | nuget |
| cdmdotnet.Logging | 1.2.96.73 | 间接依赖 | nuget |
| Microsoft.AspNet.WebApi.Core | 5.2.3 | 间接依赖 | nuget |
| Cqrs.Ninject | 1.601.864 | 间接依赖 | nuget |
| Microsoft.AspNet.Identity.Owin | 2.2.1 | 间接依赖 | nuget |
| Microsoft.Data.OData | 5.6.2 | 间接依赖 | nuget |
| bootstrap | 3.0.0 | 间接依赖 | nuget |
| Microsoft.ApplicationInsights.WindowsServer.TelemetryChannel | 2.2.0 | 间接依赖 | nuget |
| Angular.UI.Bootstrap | 2.5.0 | 间接依赖 | nuget |
| Microsoft.Data.Edm | 5.2.0 | 间接依赖 | nuget |