Cross-site Scripting in DayByDay CRM

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-22109 · ADVISORY
• Bottelet/DaybydayCRM commit 002dc75 · WEB
• Bottelet/DaybydayCRM · PACKAGE
• whitesourcesoftware.com/vulnerability-database/CVE-2022-22109 · WEB

bottelet/flarepoint のその他の脆弱性

• CVE-2022-22111高 8.8In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization. Any application user in the application who has update user permissio…
• CVE-2022-22110高 7.5In Daybyday CRM, versions 1.1 through 2.2.0 enforce weak password requirements in the user update functionality. A user with privileges to u…
• CVE-2022-22108中 4.3In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (e…
• CVE-2022-22107中 4.3In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (e…