CVE-2023-27168

概要

参考情報

• balwurk.com · Not Applicable
• balwurk.github.io/CVE-2023-27168 · Exploit
• ghostline.neocities.org/CVE-2023-27168
• writeback4t.com · Not Applicable
• xpand-it.com · Product

write-back manager のその他の脆弱性

• CVE-2023-27172緊急 9.1Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key used to s…
• CVE-2023-27170高 7.5Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter.
• CVE-2023-27169中 6.5Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and pre…