Skip to content

Product

owasp faction vulnerabilities

1 published CVE affecting owasp faction, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest owasp faction CVEs

Newest publication first

  1. CVE-2025-66022 FACTION Unauthenticated Custom Extension Upload leads to RCE

    Published
    CriticalCVSS 9.8 EPSS 0.72%

    FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to version 1.7.1, an extension execution path in Faction’s extension framework permits untrusted extension code to execute arbitrary system commands on the server when a lifecycle hook is invoked, result...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.