CVE-2019-5925

概要

参考情報

• jvn.jp/en/jp/JVN40288903/index.html · Third Party Advisory
• dradisframework.com/ce/security_reports.html · Vendor Advisory

dradis のその他の脆弱性

• CVE-2023-50458中 4.3In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about other users' jobs.
• CVE-2023-50786中 4.3Dradis through 4.16.0 allows referencing external images (resources) over HTTPS, instead of forcing the use of embedded (uploaded) images. T…
• CVE-2023-31223中 5.4Dradis before 4.8.0 allows persistent XSS by authenticated author users, related to avatars.
• CVE-2022-30028中 5.9Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token.
• CVE-2019-19946中 6.5The API in Dradis Pro 3.4.1 allows any user to extract the content of a project, even if this user is not part of the project team.