CVE-2023-42225

概要

参考情報

• gitlab.com/daniele_m/cve-list/-/blob/main/README.md · Third Party Advisory

helpdeskadvanced のその他の脆弱性

• CVE-2023-42234中 5.4Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery (CSRF) via the WSCView function.
• CVE-2023-42233中 6.1Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the Filter/FilterEditor function.
• CVE-2023-42232高 7.5Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function.
• CVE-2023-42231高 8.1Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can delete admin users by…
• CVE-2023-42230中 6.1Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the WSCView/Save function.