Cross-site Scripting in kiwitcms

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-4105 · ADVISORY
• kiwitcms/kiwi commit a2b169f · WEB
• huntr.dev/bounties/386417e9-0cd5-4d80-8137-b0fd5c30b8f8 · WEB
• pypi.org/project/kiwitcms · PACKAGE
• GitHub Advisory GHSA-hf94-8mx5-2vvj · ADVISORY

kiwitcms のその他の脆弱性

• CVE-2026-49292低 0.0Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/vie…
• CVE-2026-55630低 0.0Kiwi TCMS is an open source test management system. Prior to 16.1, TestCase.extra_link and TestPlan.extra_link accepted unsanitized user inp…
• CVE-2026-54724中 6.1Kiwi TCMS is an open source test management system. Prior to 16.1, the account confirmation endpoint accepted an unvalidated next parameter,…
• CVE-2023-36809中 5.4Kiwi TCMS, an open source test management system allows users to upload attachments to test plans, test cases, etc. Versions of Kiwi TCMS pr…
• CVE-2023-33977中 5.4Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to te…