CVE-2022-34020

概要

参考情報

• cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html · Third Party Advisory
• securityblog101.blogspot.com/2022/09/cve-2022-34020.html · Exploit

iot platform and lorawan network server のその他の脆弱性

• CVE-2022-34022高 7.2SQL injection vulnerability in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via a crafted POST request to /ResiotQueryDB…
• CVE-2022-34021中 5.4Multiple Cross Site Scripting (XSS) vulnerabilities in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via the form fields.