CVE-2022-32458

概要

参考情報

• chtsecurity.com/news/09757883-fea6-4aff-9e22-8ae8c4f8f7bb · Third Party Advisory
• twcert.org.tw/tw/cp-132-6288-49e01-1.html · Third Party Advisory

business process management のその他の脆弱性

• CVE-2022-32457中 5.3Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover interna…
• CVE-2022-32456緊急 9.8Digiwin BPM’s function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to ac…