CVE-2021-44916

概要

参考情報

• packetstormsecurity.com/files/165502/Open-AudIT-Community-4.2.0-Cross-Site-Scripting.html · Exploit
• community.opmantek.com/display/OA/Errata+-+4.2.0+and+earlier+Javascript+vulnerability · Mitigation
• community.opmantek.com/display/OA/Release+Notes+for+Open-AudIT+v4.3.0 · Release Notes
• Opmantek/open-audit commit e37b64b · Patch

open-audit のその他の脆弱性

• CVE-2021-44674中 6.5An information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0. The vulnerability allows an authenticated attacker to read f…
• CVE-2021-40612緊急 9.8An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in code_igniter/application/controllers/…
• CVE-2021-3333中 6.1Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting (XSS). When outputting SQL statements for debugging, a maliciously crafted que…
• CVE-2021-3130中 5.9Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users u…
• CVE-2020-11943高 8.8An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload.