CVE-2023-39448

概要

参考情報

• jvn.jp/en/jp/JVN82758000 · Third Party Advisory
• ss-proj.org/support/954.html · Patch

shirasagi のその他の脆弱性

• CVE-2024-46898高 7.5SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is…
• CVE-2023-41889中 5.3SHIRASAGI is a Content Management System. Prior to version 1.18.0, SHIRASAGI is vulnerable to a Post-Unicode normalization issue. This happe…
• CVE-2023-38569中 5.4Stored cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to execute an arbitrary scrip…
• CVE-2023-36492中 6.1Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated attacker to execute an arbitrary …
• CVE-2023-22427中 4.8Stored cross-site scripting vulnerability in Theme switching function of SHIRASAGI v1.16.2 and earlier versions allows a remote attacker wit…