CVE-2023-3490

概要

参考情報

• fossbilling/fossbilling commit 2ddb743 · Patch
• huntr.dev/bounties/4e60ebc1-e00f-48cb-b011-3cefce688ecd · Exploit

fossbilling のその他の脆弱性

• CVE-2023-4005緊急 9.8Insufficient Session Expiration in GitHub repository fossbilling/fossbilling prior to 0.5.5.
• CVE-2023-3568中 4.8Open Redirect in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
• CVE-2023-3521中 6.1Cross-site Scripting (XSS) - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4.
• CVE-2023-3493高 8.0Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3.
• CVE-2023-3491高 8.8Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3.