CVE-2023-24278

概要

参考情報

• census-labs.com/news/2023/03/16/reflected-xss-vulnerabilities-in-squidex-squidsvg-endpoint · Exploit
• openwall.com/lists/oss-security/2023/03/16/1 · Mailing List

squidex のその他の脆弱性

• CVE-2026-24736高 8.8Squidex is an open source headless content management system and content management hub. Versions of the application up to and including 7.2…
• CVE-2023-46857中 5.4Squidex before 7.9.0 allows XSS via an SVG document to the Upload Assets feature. This occurs because there is an incomplete blacklist in th…
• CVE-2023-46253高 7.2Squidex is an open source headless CMS and content management hub. Affected versions are subject to an arbitrary file write vulnerability in…
• CVE-2023-46252中 6.1Squidex is an open source headless CMS and content management hub. Affected versions are missing origin verification in a postMessage handle…
• CVE-2023-46744中 5.4Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting (XSS) vulnerability en…