CVE-2022-34834

概要

参考情報

• crashpark.weebly.com/blog/2-stored-xss-in-agilereporter-213-by-vermeg · Exploit
• vermeg.com/agile-reporter · Product

agile reporter のその他の脆弱性

• CVE-2022-34833中 5.4An issue was discovered in VERMEG AgileReporter 21.3. An admin can enter an XSS payload in the Analysis component.
• CVE-2022-34832中 6.5An issue was discovered in VERMEG AgileReporter 21.3. XXE can occur via an XML document to the Analysis component.