CVE-2021-36794

概要

参考情報

• community.siren.io/c/announcements · Vendor Advisory
• docs.siren.io/index · Release Notes
• docs.siren.io/siren-platform-user-guide/11.1/release-notes.html · Release Notes

investigate のその他の脆弱性

• CVE-2023-35857緊急 9.8In Siren Investigate before 13.2.2, session keys remain active even after logging out.
• CVE-2022-47544緊急 9.8An issue was discovered in Siren Investigate before 12.1.7. Script variable whitelisting is insufficiently sandboxed.
• CVE-2022-47543中 5.3An issue was discovered in Siren Investigate before 12.1.7. There is an ACL bypass on global objects.
• CVE-2021-31216高 8.1Siren Investigate before 11.1.1 contains a server side request forgery (SSRF) defect in the built-in image proxy route (which is enabled by …