CVE-2024-33865

概要

参考情報

• linqi.help/Updates/en · Broken Link
• linqi.de/de-DE/blog.html · Product

linqi のその他の脆弱性

• CVE-2024-33868緊急 9.8An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection.
• CVE-2024-33867中 4.8An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt.
• CVE-2024-33866中 5.5An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/{GUID] XSS.
• CVE-2024-33864中 5.9An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in proce…
• CVE-2024-33863緊急 9.8An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion.