CVE-2023-50165

概要

参考情報

• support.pega.com/support-doc/pega-security-advisory-g23-vulnerability-remediation-note · Vendor Advisory

platform のその他の脆弱性

• CVE-2023-50166中 6.1Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.
• CVE-2023-32089中 6.1 Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description
• CVE-2023-32088中 6.1 Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation
• CVE-2023-32087中 6.1 Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation
• CVE-2019-16374緊急 9.8Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length. An attacker can speci…