SQL Injection in FreeTAKServer-UI

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-25506 · ADVISORY
• FreeTAKTeam/UI · WEB
• FreeTAKTeam/UI · PACKAGE
• pypi.org/project/freetakserver-ui · PACKAGE
• GitHub Advisory GHSA-jr2m-29wj-w9qc · ADVISORY

freetakserver-ui のその他の脆弱性

• CVE-2022-25512高 7.5FreeTAKServer-UI v1.9.8 was discovered to leak sensitive API and Websocket keys.
• CVE-2022-25511中 6.5An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anyw…
• CVE-2022-25507中 5.4FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Callsign parameter.