CVE-2024-38318

概要

参考情報

• ibm.com/support/pages/node/7182490 · Vendor Advisory

aspera shares のその他の脆弱性

• CVE-2025-66487中 6.5IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send emails, which could re…
• CVE-2025-66486中 6.1IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewe…
• CVE-2025-66485中 5.4IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.  …
• CVE-2025-66484中 5.4IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary Java…
• CVE-2025-66483中 6.5IBM Aspera Shares 1.9.9 through 1.11.0 does not invalidate session after a password reset which could allow an authenticated user to imperso…