CVE-2023-4561

概要

参考情報

• omeka/omeka-s commit 4482f4f · Patch
• huntr.dev/bounties/d4302a0d-db62-4d76-93dd-e6e6473e057a · Exploit

omeka s のその他の脆弱性

• CVE-2023-4560中 6.5Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4.
• CVE-2023-4159高 8.8Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3.
• CVE-2023-4158中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.3.
• CVE-2023-4157中 4.8CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository omeka/omeka-s…