uvdesk/community-skeleton vulnerable to Stored Cross-site Scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-1197 · ADVISORY
• uvdesk/community-skeleton commit 6fae944 · WEB
• huntr.dev/bounties/97d226ea-2cd8-4f4d-9360-aa46c37fdd26 · WEB
• uvdesk/community-skeleton · PACKAGE

uvdesk/community-skeleton のその他の脆弱性

• CVE-2023-0325中 6.1Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the appl…
• CVE-2023-0265高 8.8Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application doe…