CVE-2023-36255

概要

参考情報

• trovent.github.io/security-advisories/TRSA-2303-01/TRSA-2303-01.txt
• trovent.io/security-advisory-2303-01 · Exploit
• eramba.org

eramba のその他の脆弱性

• CVE-2025-55462中 6.5A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in t…
• CVE-2022-43342中 5.4A stored cross-site scripting (XSS) vulnerability in the Add function of Eramba GRC Software c2.8.1 allows attackers to execute arbitrary we…
• CVE-2020-28031中 4.3eramba through c2.8.1 allows HTTP Host header injection with (for example) resultant wkhtml2pdf PDF printing by authenticated users.
• CVE-2020-25105緊急 9.8eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token (createHash has only a million possibilities).
• CVE-2020-25104中 5.4eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For example, the filename ha…