Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-25512 · ADVISORY
• FreeTAKTeam/UI · WEB
• FreeTAKTeam/UI · PACKAGE
• pypi.org/project/freetakserver-ui · PACKAGE
• GitHub Advisory GHSA-9988-f88m-mr42 · ADVISORY

freetakserver-ui のその他の脆弱性

• CVE-2022-25511中 6.5An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anyw…
• CVE-2022-25507中 5.4FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Callsign parameter.
• CVE-2022-25506中 6.5FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser.