CVE-2020-12687

概要

参考情報

• SerpicoProject/Serpico commit 0b86004 · Patch
• SerpicoProject/Serpico release 1.3.3 · Patch

serpico のその他の脆弱性

• CVE-2019-19859中 5.3An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The Add Collaborator allows unlimited data via …
• CVE-2019-19858中 4.8An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/add_user/UID allows stored XSS via the au…
• CVE-2019-19857中 6.5An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. An admin can change their password without prov…
• CVE-2019-19856中 4.8An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The User Type on the admin/list_user page allow…
• CVE-2019-19855中 4.8An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/list_user allows stored XSS via the auth_…