Economizzer Insecure Direct Object Reference vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-38872 · ADVISORY
• gugoan/economizzer commit 3730880 · WEB
• dub-flow/vulnerability-research · WEB
• gugoan/economizzer · PACKAGE
• economizzer.org · WEB

gugoan/economizzer のその他の脆弱性

• CVE-2023-38877高 8.8A host header injection vulnerability exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April 2023). By sending a specially cra…
• CVE-2023-38874高 8.8A remote code execution (RCE) vulnerability via an insecure file upload exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April…
• CVE-2023-38873中 6.5The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer is vulnerable to Clickjacking. Clickjacking, also known as a "UI redre…
• CVE-2023-38871中 5.3The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer has a user enumeration vulnerability in the login and forgot password …