CVE-2020-10807

概要

参考情報

• mitre/caldera · Third Party Advisory
• mitre/caldera · Third Party Advisory
• mitre/caldera#1407 · Patch
• mitre/caldera release 2.6.5 · Release Notes

caldera のその他の脆弱性

• CVE-2022-40606中 6.1MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability th…
• CVE-2022-41139中 5.4MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary com…
• CVE-2022-40605中 6.1MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability th…
• CVE-2021-42559高 8.8An issue was discovered in CALDERA 2.8.1. It contains multiple startup "requirements" that execute commands when starting the server. Becaus…
• CVE-2021-42558中 6.1An issue was discovered in CALDERA 2.8.1. It contains multiple reflected, stored, and self XSS vulnerabilities that may be exploited by auth…