CVE-2022-24240

概要

参考情報

• aceware.com/forum/viewtopic.php · Release Notes

aceweb online portal のその他の脆弱性

• CVE-2022-24581高 7.5ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when …
• CVE-2022-24241高 7.5ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the txtFilePath parameter…
• CVE-2022-24239緊急 9.8ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp.
• CVE-2022-24238中 6.1ACEweb Online Portal 3.5.065 was discovered to contain a cross-site scripting (XSS) vulnerability via the txtNmName1 parameter in person.awp…