CVE-2025-3572

概要

参考情報

• twcert.org.tw/en/cp-139-10065-2494c-2.html · Third Party Advisory
• twcert.org.tw/tw/cp-132-10064-6346a-1.html · Third Party Advisory

smartrobot のその他の脆弱性

• CVE-2024-12652高 8.8A Improper Control of Generation of Code ('Code Injection') vulnerability in groovy script function in SmartRobot′s Conversational AI Platfo…
• CVE-2024-8776中 6.1SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers to inject JavaScript …
• CVE-2024-2413緊急 9.8Intumit SmartRobot uses a fixed encryption key for authentication. Remote attackers can use this key to encrypt a string composed of the use…
• CVE-2024-0552緊急 9.8Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerabi…