CVE-2020-7866

概要

参考情報

• support.tobesoft.co.kr/Support/index.html · Vendor Advisory
• krcert.or.kr/data/secNoticeView.do · Third Party Advisory

xplatform のその他の脆弱性

• CVE-2021-26629高 8.8A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is…
• CVE-2021-26626高 8.8Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands. IF the second parameter valu…
• CVE-2020-7857緊急 9.8A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insuffic…
• CVE-2020-7853緊急 9.8An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out-of-range data to be read. An …
• CVE-2020-7841高 8.8Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution when the command string…