CVE-2022-24254

概要

参考情報

• snyk.io/research/zip-slip-vulnerability · Technical Description
• whiteoaksecurity.com/blog/extensis-portfolio-vulnerability-disclosure · Exploit

portfolio のその他の脆弱性

• CVE-2022-24255高 8.8Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain administrator privileges.
• CVE-2022-24253高 8.8Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the component AdminFileTransfe…
• CVE-2022-24252高 8.8An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allows remote attackers to execute…
• CVE-2022-24251高 8.8Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catalog Asset Upload funct…