CVE-2020-25105

Description

References

• discussions.eramba.org/t/bug-security-vulnerabilities-not-serious/1650/2 · Vendor Advisory
• gitlab.com/gitlab-com/gl-security/disclosures/-/blob/master/005_eramba/eramba_weak_password_reset.md · Third Party Advisory

Autres vulnérabilités de eramba

• CVE-2025-55462MOYENNE 6.5A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in t…
• CVE-2023-36255ÉLEVÉE 8.8An issue in Eramba Limited Eramba Enterprise and Community edition v.3.19.1 allows a remote attacker to execute arbitrary code via the path …
• CVE-2022-43342MOYENNE 5.4A stored cross-site scripting (XSS) vulnerability in the Add function of Eramba GRC Software c2.8.1 allows attackers to execute arbitrary we…
• CVE-2020-28031MOYENNE 4.3eramba through c2.8.1 allows HTTP Host header injection with (for example) resultant wkhtml2pdf PDF printing by authenticated users.
• CVE-2020-25104MOYENNE 5.4eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For example, the filename ha…