CVE-2020-28874

概要

参考情報

• projectsend/projectsend commit 4402047 · Patch
• projectsend/projectsend · Patch
• projectsend/projectsend release r1295 · Release Notes
• varandinawer/CVE-2020-28874 · Exploit

projectsend のその他の脆弱性

• CVE-2023-53980緊急 9.8ProjectSend r1605 contains a remote code execution vulnerability that allows attackers to upload malicious files by manipulating file extens…
• CVE-2023-53930高 7.5ProjectSend r1605 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to download private files…
• CVE-2023-53906中 4.8projectSend r1605 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScri…
• CVE-2023-53905高 8.0ProjectSend r1605 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into user profile name…
• CVE-2024-11680緊急 9.8悪用確認済み（CISA KEV）ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit …