CVE-2022-40248

概要

参考情報

• CERTCC/VINCE · Third Party Advisory

vince のその他の脆弱性

• CVE-2024-10469中 6.5VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users.
• CVE-2024-9953中 4.9A potential denial-of-service (DoS) vulnerability exists in CERT VINCE software versions prior to 3.0.8. An authenticated administrative use…
• CVE-2022-40238高 8.8A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5. An authenticated attacker can inject arbitrary pickle…
• CVE-2022-40257中 5.4An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject arbitrary HTML via a …
• CVE-2022-25799中 6.1An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.50.0. An attacker could send a link that has a specially crafted …