CVE-2023-38870

概要

参考情報

• dub-flow/vulnerability-research · Exploit
• gugoan/economizzer · Product
• economizzer.org · Product

economizzer のその他の脆弱性

• CVE-2023-38877高 8.8A host header injection vulnerability exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April 2023). By sending a specially cra…
• CVE-2023-38874高 8.8A remote code execution (RCE) vulnerability via an insecure file upload exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April…
• CVE-2023-38873中 6.5The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer is vulnerable to Clickjacking. Clickjacking, also known as a "UI redre…
• CVE-2023-38872低 3.7An Insecure Direct Object Reference (IDOR) vulnerability in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1 allows any unauth…
• CVE-2023-38871中 5.3The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer has a user enumeration vulnerability in the login and forgot password …