CVE-2023-25265

概要

参考情報

• frycos.github.io/vulns4free/2023/01/24/0days-united-nations.html · Exploit
• resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notes · Release Notes

tornado のその他の脆弱性

• CVE-2024-42733緊急 9.8An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary code via a crafted script to the UNC path inpu…
• CVE-2023-25266高 8.8An issue was discovered in Docmosis Tornado prior to version 2.9.5. An authenticated attacker can change the Office directory setting pointi…
• CVE-2023-25264高 7.5An issue was discovered in Docmosis Tornado prior to version 2.9.5. An unauthenticated attacker can bypass the authentication check filter c…