CVE-2018-19596

概要

参考情報

• security-breachlock/CVE-2018-19596

zurmo のその他の脆弱性

• CVE-2019-14472中 6.1Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATH_INFO.
• CVE-2018-19506中 4.8Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI.