CVE-2021-45228

概要

参考情報

• appsource.microsoft.com/en-us/product/web-apps/constructionindustrysolutionslimited-5057232.coinsconstructioncloud · Patch
• syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-031.txt · Exploit

coins construction cloud のその他の脆弱性

• CVE-2021-45227中 5.4An issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML IFRAME elements, the file upload functionalit…
• CVE-2021-45226中 6.5An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause i…
• CVE-2021-45225中 6.1An issue was discovered in COINS Construction Cloud 11.12. Due to improper input neutralization, it is vulnerable to reflected cross-site sc…
• CVE-2021-45224中 6.1An issue was discovered in COINS Construction Cloud 11.12. In several locations throughout the application, JavaScript code is passed as a U…
• CVE-2021-45223中 6.5An issue was discovered in COINS Construction Cloud 11.12. Due to insufficient input neutralization, it is vulnerable to denial of service a…