CVE-2024-38466

概要

参考情報

• Pumpkin-ito/Cve-Vuln · Broken Link

synthesis image system のその他の脆弱性

• CVE-2024-38468緊急 9.8Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.
• CVE-2024-38467高 7.5Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information retrieval via the queryUser API.
• CVE-2024-38465中 5.3Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus erro…