CVE-2022-35216

概要

参考情報

• chtsecurity.com/news/48032532-b2de-401c-97a8-a2be5691988f · Third Party Advisory
• twcert.org.tw/tw/cp-132-6374-1c6c9-1.html · Third Party Advisory

omicard edm のその他の脆弱性

• CVE-2022-32965緊急 9.8OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the serve…
• CVE-2022-32964緊急 9.8OMICARD EDM’s API function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands …
• CVE-2022-32963高 7.5OMICARD EDM’s mail file relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability…