CVE-2022-38341

Description

References

• community.safe.com/s/article/Known-Issue-Lack-of-server-side-validation-when-creating-a-new-user-in-FME-Server · Patch
• cycura.com/blog/safe-software-inc-fme-server-vulnerability-disclosure · Third Party Advisory

Weitere Schwachstellen in fme server

• CVE-2023-35801HOCH 8.1A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation when editing a netwo…
• CVE-2022-38340HOCH 7.2Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via the component fmedata…
• CVE-2022-38339MITTEL 6.1Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting (XSS) vulnerability which allows attackers to exec…
• CVE-2022-38342MITTEL 6.5Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows a…
• CVE-2020-22790MITTEL 5.4Authenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to execute codeby injecting arbitrary web sc…