CVE-2023-3074

概要

参考情報

• tsolucio/corebos commit 659e328 · Patch
• huntr.dev/bounties/6132f557-3f0f-465d-990f-4329313349a4 · Exploit

corebos のその他の脆弱性

• CVE-2023-48029高 8.0Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vuln…
• CVE-2023-3073中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.
• CVE-2023-3075中 6.5Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.
• CVE-2023-3070中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
• CVE-2023-3069緊急 9.8Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.