CVE-2022-22834

概要

参考情報

• labs.yarix.com/2022/03/overit-framework-xslt-injection-and-xxe-cve-2022-22834-cve-2022-22835 · Exploit
• labs.yarix.com/advisories/cve-2022-22834 · Third Party Advisory
• overit.us/products/geocall · Product
• overit.ai/product/nextgen-fsm

geocall のその他の脆弱性

• CVE-2022-22835中 6.5An issue was discovered in OverIT Geocall before version 8.0. An authenticated user who has the Test Trasformazione XSL functionality enable…
• CVE-2019-5891緊急 9.8An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allows an attacker to obtain a cookie of an …
• CVE-2019-5890高 8.8An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user…
• CVE-2019-5889高 7.5An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977.
• CVE-2019-5888中 6.1Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977.