CVE-2022-4446

概要

参考情報

• tsolucio/corebos commit 8035e72 · Patch
• huntr.dev/bounties/718f1be6-3834-4ef2-8134-907a52009894 · Exploit

corebos のその他の脆弱性

• CVE-2023-48029高 8.0Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vuln…
• CVE-2023-3073中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.
• CVE-2023-3075中 6.5Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.
• CVE-2023-3074中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
• CVE-2023-3070中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.