CVE-2023-53930

概要

参考情報

• exploit-db.com/exploits/51400 · Exploit
• projectsend.org · Product
• vulncheck.com/advisories/projectsend-insecure-direct-object-reference-file-download-vulnerability · Exploit

projectsend のその他の脆弱性

• CVE-2023-53980緊急 9.8ProjectSend r1605 contains a remote code execution vulnerability that allows attackers to upload malicious files by manipulating file extens…
• CVE-2023-53906中 4.8projectSend r1605 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScri…
• CVE-2023-53905高 8.0ProjectSend r1605 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into user profile name…
• CVE-2024-11680緊急 9.8悪用確認済み（CISA KEV）ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit …
• CVE-2024-7659高 7.5A vulnerability, which was classified as problematic, was found in projectsend up to r1605. Affected is the function generate_random_string …