CVE-2022-34832

概要

参考情報

• crashpark.weebly.com/blog/xxe-in-agilereporter-213-by-vermeg · Exploit
• vermeg.com/agile-reporter · Product

agile reporter のその他の脆弱性

• CVE-2022-34834中 4.8An issue was discovered in VERMEG AgileReporter 21.3. Attackers can gain privileges via an XSS payload in an Add Comment action to the Activ…
• CVE-2022-34833中 5.4An issue was discovered in VERMEG AgileReporter 21.3. An admin can enter an XSS payload in the Analysis component.