CVE-2023-53905

概要

参考情報

• exploit-db.com/exploits/51517 · Exploit
• projectsend.org · Product
• vulncheck.com/advisories/projectsend-csv-injection-via-user-account-export-functionality · Third Party Advisory

projectsend のその他の脆弱性

• CVE-2023-53980緊急 9.8ProjectSend r1605 contains a remote code execution vulnerability that allows attackers to upload malicious files by manipulating file extens…
• CVE-2023-53930高 7.5ProjectSend r1605 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to download private files…
• CVE-2023-53906中 4.8projectSend r1605 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScri…
• CVE-2024-11680緊急 9.8悪用確認済み（CISA KEV）ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit …
• CVE-2024-7659高 7.5A vulnerability, which was classified as problematic, was found in projectsend up to r1605. Affected is the function generate_random_string …