CVE-2019-20484

概要

参考情報

• gosecure.net/blog/2020/12/15/vera-stored-xss-improper-access-control · Exploit

vera のその他の脆弱性

• CVE-2019-20483中 5.4An issue was discovered in Viki Vera 4.9.1.26180. An attacker could set a user's last name to an XSS Payload, and read another user's cookie…
• CVE-2019-15123高 7.2The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website. An attacker could use this to u…