CVE-2024-6890

概要

参考情報

• korelogic.com/Resources/Advisories/KL-001-2024-007.txt · Exploit
• seclists.org/fulldisclosure/2024/Aug/5

journyx のその他の脆弱性

• CVE-2024-6893高 7.5The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticat…
• CVE-2024-6892中 6.1Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the Journyx web application.
• CVE-2024-6891高 8.8Attackers with a valid username and password can exploit a python code injection vulnerability during the natural login flow.