CVE-2024-46210

概要

参考情報

• gist.github.com/h4ckr4v3n/26eaa57d94f749b597ede8b404c234df · Third Party Advisory
• h4ckr4v3n/research_redaxo_5_17_1.git · Third Party Advisory

redaxo のその他の脆弱性

• CVE-2026-63002中 4.8REDAXO is a PHP-based content management system. Prior to 5.21.2, redaxo/src/addons/mediapool/pages/sync.php inserts filenames held in $diff…
• CVE-2026-63001中 4.8REDAXO is a PHP-based content management system. Prior to 5.21.2, the mediaIsInUse() handler in redaxo/src/addons/media_manager/lib/media_ma…
• CVE-2026-63000中 6.4REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_api_install_package_update in redaxo/src/addons/install/lib/api/api_pa…
• CVE-2026-62998中 4.3REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_list::getSortColumn() in redaxo/src/core/lib/list.php accepts the sort…
• CVE-2016-20053中 6.5Redaxo CMS 5.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accou…