CVE-2020-7874

概要

参考情報

• boho.or.kr/krcert/secNoticeView.do · Third Party Advisory

nexacro のその他の脆弱性

• CVE-2021-26625高 8.8Insufficient Verification of input Data leading to arbitrary file download and execute was discovered in Nexacro platform. This vulnerabilit…
• CVE-2021-26613高 7.5improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method.
• CVE-2021-26612緊急 9.8An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy…
• CVE-2021-26607緊急 9.8An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected sys…
• CVE-2019-19167緊急 9.8Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 Acti…