CVE-2023-27151

概要

参考情報

• esecforte.com/cve-2023-27151-html-injection-activity-tracker · Exploit
• opencrx.org · Release Notes

opencrx のその他の脆弱性

• CVE-2023-27150中 5.4openCRX 5.2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name field after creation of a Tracker in Manage …
• CVE-2023-40817中 6.1OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field.
• CVE-2023-40816中 6.1OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field.
• CVE-2023-40815中 6.1OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field.
• CVE-2023-40814中 6.1OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field.