CVE-2019-20002

概要

参考情報

• medium.com/%40ayaan.saikia91/formula-injection-vulnerability-on-solarwinds-webhelpdesk-12-7-1-37569cd4cdc1

webhelpdesk のその他の脆弱性

• CVE-2021-35254高 8.8SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input…
• CVE-2021-35232中 6.1Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web …
• CVE-2019-16959中 6.5SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket.
• CVE-2019-16957中 5.4SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account.
• CVE-2019-16955中 5.4SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request.