CVE-2019-19855

概要

参考情報

• SerpicoProject/Serpico commit 270f05c · Patch
• websec.nl/news.php · Third Party Advisory

serpico のその他の脆弱性

• CVE-2020-12687中 6.5An issue was discovered in Serpico before 1.3.3. The /admin/attacments_backup endpoint can be requested by non-admin authenticated users. Th…
• CVE-2019-19859中 5.3An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The Add Collaborator allows unlimited data via …
• CVE-2019-19858中 4.8An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/add_user/UID allows stored XSS via the au…
• CVE-2019-19857中 6.5An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. An admin can change their password without prov…
• CVE-2019-19856中 4.8An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The User Type on the admin/list_user page allow…