CVE-2021-45225

概要

参考情報

• appsource.microsoft.com/en-us/product/web-apps/constructionindustrysolutionslimited-5057232.coinsconstructioncloud · Patch
• syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-052.txt · Exploit
• syss.de/pentest-blog/multiple-schwachstellen-im-coins-construction-cloud-erp-syss-2021-028/-029/-030/-031/-051/-052/-053 · Third Party Advisory

coins construction cloud のその他の脆弱性

• CVE-2021-45228中 5.4An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task…
• CVE-2021-45227中 5.4An issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML IFRAME elements, the file upload functionalit…
• CVE-2021-45226中 6.5An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause i…
• CVE-2021-45224中 6.1An issue was discovered in COINS Construction Cloud 11.12. In several locations throughout the application, JavaScript code is passed as a U…
• CVE-2021-45223中 6.5An issue was discovered in COINS Construction Cloud 11.12. Due to insufficient input neutralization, it is vulnerable to denial of service a…