CVE-2020-15884

概要

参考情報

• munkireport/munkireport-php release · Release Notes
• munkireport/munkireport-php release v5.6.3 · Release Notes
• munkireport/munkireport-php · Third Party Advisory

munkireport のその他の脆弱性

• CVE-2020-15882高 8.1A CSRF issue in manager/delete_machine/{id} in MunkiReport before 5.6.3 allows attackers to delete arbitrary machines from the MunkiReport d…
• CVE-2020-10192中 6.1An issue was discovered in Munkireport before 5.3.0.3923. An unauthenticated actor can send a custom XSS payload through the /report/broken_…
• CVE-2020-10191中 5.4An issue was discovered in MunkiReport before 5.3.0. An authenticated actor can send a custom XSS payload through the /module/comment/save e…
• CVE-2020-10190高 8.8An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tablequery.php by craft…