CVE-2020-26517

概要

参考情報

• intland.com/codebeamer/application-lifecycle-management · Vendor Advisory
• compass-security.com/fileadmin/Research/Advisories/2021-10_CSNC-2020-012-codebeamer_ALM_XSS.txt · Exploit

codebeamer のその他の脆弱性

• CVE-2023-4296中 6.1​If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code…
• CVE-2020-26516高 8.8A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. Requests sent to the server that trigger actions do not contain…
• CVE-2020-26515高 7.5An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The remember-me cookie (CB_LOG…
• CVE-2020-26513中 5.5An issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The ReqIF XML data, used by the codebeamer ALM application to impor…
• CVE-2019-20635中 6.1codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed…