CVE-2023-50166

概要

参考情報

• support.pega.com/support-doc/pega-security-advisory-h23-vulnerability-remediation-note · Vendor Advisory

platform のその他の脆弱性

• CVE-2023-50165高 8.6Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents.
• CVE-2023-32089中 6.1 Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description
• CVE-2023-32088中 6.1 Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation
• CVE-2023-32087中 6.1 Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation
• CVE-2019-16374緊急 9.8Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length. An attacker can speci…