CVE-2022-29485

概要

参考情報

• shirasagi/shirasagi · Product
• jvn.jp/en/jp/JVN32962443/index.html · Third Party Advisory
• ss-proj.org · Vendor Advisory
• ss-proj.org/support/843.html · Patch

shirasagi のその他の脆弱性

• CVE-2024-46898高 7.5SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is…
• CVE-2023-41889中 5.3SHIRASAGI is a Content Management System. Prior to version 1.18.0, SHIRASAGI is vulnerable to a Post-Unicode normalization issue. This happe…
• CVE-2023-38569中 5.4Stored cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to execute an arbitrary scrip…
• CVE-2023-36492中 6.1Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated attacker to execute an arbitrary …
• CVE-2023-39448高 8.8Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the…