CVE-2020-10509

概要

参考情報

• chtsecurity.com/news/30772cf1-2e7e-4afe-9282-b5a196b22e71 · Third Party Advisory
• twcert.org.tw/tw/cp-132-3449-c87d8-1.html · Third Party Advisory

ehrd のその他の脆弱性

• CVE-2021-43360高 8.8Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a po…
• CVE-2021-43359高 8.8Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page after being authentica…
• CVE-2021-43358高 7.5Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path traversal attacks withou…
• CVE-2020-10510中 6.5Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers c…
• CVE-2020-10508高 7.5Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a specific URL and captur…