CVE-2023-3070

概要

参考情報

• tsolucio/corebos commit b3a7a26 · Patch
• huntr.dev/bounties/e193068e-0b95-403a-8453-e015241b8f1b · Exploit

corebos のその他の脆弱性

• CVE-2023-48029高 8.0Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vuln…
• CVE-2023-3073中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.
• CVE-2023-3075中 6.5Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.
• CVE-2023-3074中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
• CVE-2023-3069緊急 9.8Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.