CVE-2024-42904

概要

参考情報

• nuxsmin/sysPass · Issue Tracking
• nuxsmin/sysPass · Issue Tracking
• sysentr0py/CVEs · Third Party Advisory

syspass のその他の脆弱性

• CVE-2025-25478中 6.5The account file upload functionality in Syspass 3.2.x fails to properly handle special characters in filenames. This mismanagement leads to…
• CVE-2025-25476中 5.4A stored cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows a malicious user with elevated privileges to execute arbitrary Jav…
• CVE-2025-25477高 8.1A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary domain which would be …
• CVE-2022-4930中 5.4A vulnerability classified as problematic was found in nuxsmin sysPass up to 3.2.4. Affected by this vulnerability is an unknown functionali…
• CVE-2017-9306中 6.1inc/SP/Html/Html.class.php in sysPass 2.1.9 allows remote attackers to bypass the XSS filter, as demonstrated by use of an "<svg/onload=" su…