CVE-2023-4097

概要

参考情報

• incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-idm-sistemas-qsige · Third Party Advisory

qsige のその他の脆弱性

• CVE-2023-4103高 8.8QSige statistics are affected by a remote SQLi vulnerability. It has been identified that the web application does not correctly filter inpu…
• CVE-2023-4102高 8.8QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do …
• CVE-2023-4101中 6.5The QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to…
• CVE-2023-4100高 8.2Allows an attacker to perform XSS attacks stored on certain resources. Exploiting this vulnerability can lead to a DoS condition, among othe…
• CVE-2023-4099中 6.5The QSige Monitor application does not have an access control mechanism to verify whether the user requesting a resource has sufficient perm…