CVE-2022-34833

概要

参考情報

• crashpark.weebly.com/blog/1-stored-xss-in-agilereporter-213-by-vermeg · Exploit
• vermeg.com/agile-reporter · Product

agile reporter のその他の脆弱性

• CVE-2022-34834中 4.8An issue was discovered in VERMEG AgileReporter 21.3. Attackers can gain privileges via an XSS payload in an Add Comment action to the Activ…
• CVE-2022-34832中 6.5An issue was discovered in VERMEG AgileReporter 21.3. XXE can occur via an XML document to the Analysis component.