CVE-2022-50937

概要

参考情報

• ametys.org/community/en/ametys-platform/ametys-portal/overview.html · Product
• exploit-db.com/exploits/50692 · Exploit
• vulncheck.com/advisories/ametys-cms-cross-site-scripting-xss · Third Party Advisory
• vulnerability-lab.com/get_content.php · Exploit

ametys のその他の脆弱性

• CVE-2024-30614中 5.3An issue in Ametys CMS v4.5.0 and before allows attackers to obtain sensitive information via exposed resources to the error scope.
• CVE-2022-26159中 5.3The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service…
• CVE-2017-16935緊急 9.8Ametys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, which allows remote attackers to bypass intended acc…