基础信息
项目名称：cross-solution/CrossApplicantManager
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1721113109577404416/1731604583125307392
此报告由Murphysec提供
漏洞列表
| 漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
|---|---|---|---|---|
| MongoDB信息泄露漏洞 | 日志敏感信息泄露 | MPS-2021-24103 | CVE-2021-32050 | 高危 |
| laminas-form 安全漏洞 | XSS | MPS-2022-2025 | CVE-2022-23598 | 中危 |
缺陷组件
| 组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
|---|---|---|---|---|
| laminas/laminas-form | 2.17.0 | 3.1.1 | 间接依赖 | 可选修复 |
| mongodb/mongodb | 1.8.0 | 1.9.2 | 间接依赖 | 可选修复 |
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| BSD-3-Clause | 59 | 低 |
| MIT | 43 | 低 |
| GPL-2.0 | 2 | 中 |
| GPL-3.0 | 1 | 中 |
| Apache-2.0 | 3 | 低 |
| LGPL-2.0 | 1 | 中 |
| BSD-4-Clause | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| laminas/laminas-math | 3.3.2 | 间接依赖 | composer |
| laminas/laminas-i18n | 2.11.1 | 间接依赖 | composer |
| jmikola/geojson | 1.0.2 | 间接依赖 | composer |
| sebastian/version | 2.0.1 | 间接依赖 | composer |
| doctrine/inflector | 2.0.3 | 间接依赖 | composer |
| doctrine/mongodb-odm | 2.2.1 | 间接依赖 | composer |
| laminas/laminas-progressbar | 2.8.0 | 间接依赖 | composer |
| laminas/laminas-mvc-plugins | 1.1.0 | 间接依赖 | composer |
| laminas/laminas-cache-storage-adapter-mongodb | 1.0.1 | 间接依赖 | composer |
| myclabs/deep-copy | 1.10.2 | 间接依赖 | composer |
| symfony/deprecation-contracts | v2.4.0 | 间接依赖 | composer |
| doctrine/instantiator | 1.4.0 | 间接依赖 | composer |
| laminas/laminas-hydrator | 3.2.1 | 间接依赖 | composer |
| laminas/laminas-mvc-plugin-flashmessenger | 1.3.0 | 间接依赖 | composer |
| laminas/laminas-i18n-resources | 2.7.0 | 间接依赖 | composer |
| laminas/laminas-text | 2.8.1 | 间接依赖 | composer |
| mpdf/mpdf | v8.0.12 | 间接依赖 | composer |
| laminas/laminas-log | 2.13.1 | 间接依赖 | composer |
| yawik/core | 间接依赖 | composer | |
| laminas/laminas-cache-storage-adapter-ext-mongodb | 1.1.0 | 间接依赖 | composer |
| laminas/laminas-eventmanager | 3.3.1 | 间接依赖 | composer |
| laminas/laminas-cache-storage-adapter-blackhole | 1.2.1 | 间接依赖 | composer |
| laminas/laminas-stdlib | 3.4.0 | 间接依赖 | composer |
| slm/queue | 1.0.4 | 间接依赖 | composer |
| laminas/laminas-cache-storage-adapter-memcache | 1.1.0 | 间接依赖 | composer |
| laminas/laminas-modulemanager | 2.10.2 | 间接依赖 | composer |
| laminas/laminas-recaptcha | 3.3.0 | 间接依赖 | composer |
| laminas/laminas-cache-storage-adapter-redis | 1.2.0 | 间接依赖 | composer |
| laminas/laminas-code | 3.5.1 | 间接依赖 | composer |
| laminas/laminas-loader | 2.7.0 | 间接依赖 | composer |
| doctrine/collections | 1.6.7 | 间接依赖 | composer |
| laminas/laminas-permissions-acl | 2.8.0 | 间接依赖 | composer |
| laminas/laminas-cache-storage-adapter-filesystem | 1.1.1 | 间接依赖 | composer |
| symfony/polyfill-mbstring | v1.23.0 | 间接依赖 | composer |
| laminas/laminas-serializer | 2.10.1 | 间接依赖 | composer |
| tracy/tracy | v2.8.5 | 间接依赖 | composer |
| laminas/laminas-cache-storage-adapter-apcu | 1.1.0 | 间接依赖 | composer |
| doctrine/persistence | 2.2.1 | 间接依赖 | composer |
| laminas/laminas-mvc-console | 1.3.0 | 间接依赖 | composer |
| setasign/fpdi | v2.3.6 | 间接依赖 | composer |
| yawik/geo | v1.1.1 | 间接依赖 | composer |
| laminas/laminas-filter | 2.11.1 | 间接依赖 | composer |
| laminas/laminas-cache-storage-adapter-dba | 1.0.1 | 间接依赖 | composer |
| laminas/laminas-cache-storage-adapter-session | 1.1.0 | 间接依赖 | composer |
| symfony/var-dumper | v5.3.3 | 间接依赖 | composer |
| ezyang/htmlpurifier | v4.13.0 | 间接依赖 | composer |
| true/punycode | v2.1.1 | 间接依赖 | composer |
| laminas/laminas-zendframework-bridge | 1.3.0 | 间接依赖 | composer |
| laminas/laminas-cache-storage-adapter-zend-server | 1.0.1 | 间接依赖 | composer |
| laminas/laminas-cache-storage-adapter-memory | 1.1.0 | 间接依赖 | composer |
| laminas/laminas-http | 2.14.3 | 间接依赖 | composer |
| laminas/laminas-di | 2.6.1 | 间接依赖 | composer |
| webimpress/safe-writer | 2.2.0 | 间接依赖 | composer |
| doctrine/doctrine-laminas-hydrator | 2.1.1 | 间接依赖 | composer |
| paypal/rest-api-sdk-php | 1.14.0 | 间接依赖 | composer |
| nikic/php-parser | v4.12.0 | 间接依赖 | composer |
| laminas/laminas-mvc-i18n | 1.2.0 | 间接依赖 | composer |
| laminas/laminas-servicemanager | 3.7.0 | 间接依赖 | composer |
| laminas/laminas-cache-storage-adapter-xcache | 1.0.1 | 间接依赖 | composer |
| zendframework/zend-stdlib | 间接依赖 | composer | |
| psr/cache | 1.0.1 | 间接依赖 | composer |
| yawik/composer-plugin | v3.0.1 | 间接依赖 | composer |
| hybridauth/hybridauth | v2.18.0 | 间接依赖 | composer |
| symfony/process | v4.4.26 | 间接依赖 | composer |
| laminas/laminas-feed | 2.14.1 | 间接依赖 | composer |
| composer/package-versions-deprecated | 1.11.99.2 | 间接依赖 | composer |
| symfony/service-contracts | v2.4.0 | 间接依赖 | composer |
| symfony/dotenv | v4.4.25 | 间接依赖 | composer |
| doctrine/deprecations | v0.5.3 | 间接依赖 | composer |
| laminas/laminas-cache-storage-adapter-memcached | 1.1.0 | 间接依赖 | composer |
| laminas/laminas-mail | 2.14.1 | 间接依赖 | composer |
| laminas/laminas-validator | 2.14.5 | 间接依赖 | composer |
| laminas/laminas-session | 2.11.0 | 间接依赖 | composer |
| zendframework/zend-eventmanager | 间接依赖 | composer | |
| zendframework/zend-servicemanager | 间接依赖 | composer | |
| symfony/polyfill-php80 | v1.23.0 | 间接依赖 | composer |
| laminas/laminas-form | 2.17.0 | 间接依赖 | composer |
| psr/container | 1.1.1 | 间接依赖 | composer |
| laminas/laminas-servicemanager-di | 1.2.1 | 间接依赖 | composer |
| laminas/laminas-cache | 2.11.3 | 间接依赖 | composer |
| laminas/laminas-navigation | 2.11.1 | 间接依赖 | composer |
| laminas/laminas-view | 2.12.0 | 间接依赖 | composer |
| symfony/console | v5.0.11 | 间接依赖 | composer |
| laminas/laminas-mvc-plugin-prg | 1.3.0 | 间接依赖 | composer |
| laminas/laminas-captcha | 2.10.0 | 间接依赖 | composer |
| laminas/laminas-cache-storage-adapter-wincache | 1.0.1 | 间接依赖 | composer |
| friendsofphp/proxy-manager-lts | v1.0.1 | 间接依赖 | composer |
| brick/varexporter | 0.3.5 | 间接依赖 | composer |
| doctrine/cache | 1.12.1 | 间接依赖 | composer |
| psr/log | 1.1.4 | 间接依赖 | composer |
| laminas/laminas-dependency-plugin | 2.1.2 | 间接依赖 | composer |
| composer-plugin-api | 间接依赖 | composer | |
| laminas/laminas-cache-storage-adapter-apc | 1.0.1 | 间接依赖 | composer |
| symfony/polyfill-php73 | v1.23.0 | 间接依赖 | composer |
| facebook/graph-sdk | 5.7.0 | 间接依赖 | composer |
| laminas/laminas-authentication | 2.8.0 | 间接依赖 | composer |
| psr/simple-cache | 1.0.1 | 间接依赖 | composer |
| doctrine/doctrine-module | 4.1.2 | 间接依赖 | composer |
| laminas/laminas-json | 3.2.0 | 间接依赖 | composer |
| laminas/laminas-mvc-plugin-identity | 1.2.0 | 间接依赖 | composer |
| doctrine/doctrine-mongo-odm-module | 3.0.2 | 间接依赖 | composer |
| laminas/laminas-escaper | 2.8.0 | 间接依赖 | composer |
| laminas/laminas-uri | 2.8.1 | 间接依赖 | composer |
| laminas/laminas-mvc-plugin-fileprg | 1.2.0 | 间接依赖 | composer |
| imagine/imagine | 1.2.4 | 间接依赖 | composer |
| laminas/laminas-router | 3.4.5 | 间接依赖 | composer |
| laminas/laminas-paginator | 2.10.0 | 间接依赖 | composer |
| doctrine/event-manager | 1.1.1 | 间接依赖 | composer |
| symfony/finder | v4.4.25 | 间接依赖 | composer |
| jean85/pretty-package-versions | 1.6.0 | 间接依赖 | composer |
| doctrine/annotations | 1.13.1 | 间接依赖 | composer |
| paragonie/random_compat | v9.99.100 | 间接依赖 | composer |
| symfony/polyfill-ctype | v1.23.0 | 间接依赖 | composer |
| laminas/laminas-mvc | 3.2.0 | 间接依赖 | composer |
| laminas/laminas-console | 2.8.0 | 间接依赖 | composer |
| laminas/laminas-mime | 2.8.0 | 间接依赖 | composer |
| container-interop/container-interop | 1.2.0 | 间接依赖 | composer |
| laminas/laminas-inputfilter | 2.12.0 | 间接依赖 | composer |
| laminas/laminas-config | 3.5.0 | 间接依赖 | composer |
| symfony/filesystem | v4.4.26 | 间接依赖 | composer |
| mongodb/mongodb | 1.8.0 | 间接依赖 | composer |
| doctrine/lexer | 1.2.1 | 间接依赖 | composer |