CVE-2020-13972

概要

参考情報

• burninatorsec.blogspot.com/2020/09/cve-2020-13972-xss-via-ssrf-in.html · Exploit

web chat のその他の脆弱性

• CVE-2019-16951中 5.3A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34. One can replace the localhost attribute with one's own dom…
• CVE-2019-16950中 6.1An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. The QueueName parameter of a GET request allows for insertion of…
• CVE-2019-16949中 6.5An issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. A user is allowed to send an archive of their chat log to an email a…
• CVE-2019-16948緊急 9.8An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=htt…