Cross-site Scripting in FreeTAKServer-UI

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-25507 · ADVISORY
• FreeTAKTeam/UI · WEB
• FreeTAKTeam/UI · PACKAGE
• pypi.org/project/freetakserver-ui · PACKAGE
• GitHub Advisory GHSA-gjh6-wvhq-h4qx · ADVISORY

freetakserver-ui のその他の脆弱性

• CVE-2022-25512高 7.5FreeTAKServer-UI v1.9.8 was discovered to leak sensitive API and Websocket keys.
• CVE-2022-25511中 6.5An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anyw…
• CVE-2022-25506中 6.5FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser.