CVE-2019-17092

概要

参考情報

• packetstormsecurity.com/files/154851/OpenProject-10.0.1-9.0.3-Cross-Site-Scripting.html
• seclists.org/fulldisclosure/2019/Oct/29
• groups.google.com/forum
• seclists.org/bugtraq/2019/Oct/19
• openproject.org/release-notes/openproject-10-0-2 · Release Notes
• openproject.org/release-notes/openproject-9-0-4 · Release Notes

openproject のその他の脆弱性

• CVE-2026-40896高 7.1OpenProject is open-source, web-based project management software. Prior to version 17.3.0, a user with `manage_agendas` permission in any p…
• CVE-2026-33667高 7.4OpenProject is an open-source project management application. In versions prior to 17.3.0, 2FA OTP verification in the confirm_otp action of…
• CVE-2026-34717高 8.1OpenProject is an open-source, web-based project management software. Prior to version 17.2.3, the =n operator in modules/reporting/lib/repo…
• CVE-2026-32703中 5.4OpenProject is an open-source, web-based project management software. In versions prior to 16.6.9, 17.0.6, 17.1.3, and 17.2.1, the Repositor…
• CVE-2026-32698高 7.2OpenProject is an open-source, web-based project management software. Versions prior to 16.6.9, 17.0.6, 17.1.3, and 17.2.1 are vulnerable to…