CVE-2020-28722

概要

参考情報

• r29k.com/articles/bb/stored-xss-in-deskpro · Exploit

deskpro のその他の脆弱性

• CVE-2021-35391高 7.2Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary code via a crafted …
• CVE-2021-36695中 5.4Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulnerability in the downl…
• CVE-2021-36696中 5.4Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulnerability in social me…
• CVE-2020-11467高 7.2An issue was discovered in Deskpro before 2019.8.0. This product enables administrators to modify the helpdesk interface by editing /portal/…
• CVE-2020-11466中 4.3An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user's privilege, allowing an at…