CVE-2023-50786

概要

参考情報

• dradis.com · Product
• dradis.com/ce · Product
• securiteam.io/2025/07/04/cve-2023-50786-dradis-ntlm-theft-vulnerability · Third Party Advisory

dradis のその他の脆弱性

• CVE-2023-50458中 4.3In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about other users' jobs.
• CVE-2023-31223中 5.4Dradis before 4.8.0 allows persistent XSS by authenticated author users, related to avatars.
• CVE-2022-30028中 5.9Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token.
• CVE-2019-19946中 6.5The API in Dradis Pro 3.4.1 allows any user to extract the content of a project, even if this user is not part of the project team.
• CVE-2019-5925中 5.4Cross-site scripting vulnerability in Dradis Community Edition Dradis Community Edition v3.11 and earlier and Dradis Professional Edition v3…