CVE-2023-2554

概要

参考情報

• unilogies/bumsys commit 1b426f5 · Patch
• huntr.dev/bounties/396785a0-7bb6-4db4-b4cb-607b0fd4ab4b · Exploit

bumsys のその他の脆弱性

• CVE-2023-2832高 7.2 SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0.
• CVE-2023-2553中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to 2.2.0.
• CVE-2023-2552高 8.8Cross-Site Request Forgery (CSRF) in GitHub repository unilogies/bumsys prior to 2.1.1.
• CVE-2023-2551高 8.8PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1.
• CVE-2023-1362中 6.1Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2.