CVE-2022-42715

概要

参考情報

• uclahs-secops/security-research · Exploit
• redcap.med.usc.edu/_shib/assets/ChangeLog_Standard.pdf · Release Notes
• evms.edu/research/resources_services/redcap/redcap_change_log · Release Notes

redcap のその他の脆弱性

• CVE-2024-55374中 5.3REDCap 14.3.13 allows an attacker to enumerate usernames due to an observable discrepancy between login attempts.
• CVE-2024-37396中 5.4A stored cross-site scripting (XSS) vulnerability in the Calendar function of REDCap 13.1.9 allows authenticated users to execute arbitrary …
• CVE-2024-37395中 5.4A stored cross-site scripting (XSS) vulnerability in the Public Survey function of REDCap 13.1.9 allows authenticated users to execute arbit…
• CVE-2024-37394中 5.4A stored cross-site scripting (XSS) vulnerability in the Project Dashboards of REDCap 13.1.9 allows authenticated users to execute arbitrary…
• CVE-2025-23113高 8.8An issue was discovered in REDCap 14.9.6. It has an action=myprojects&logout=1 CSRF issue in the alert-title while performing an upload of a…