CVE-2025-60947

概要

参考情報

• csprousers/csweb commit eba0b59 · Patch
• hx381/cspro-exploits · Third Party Advisory
• raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-082-01.json · Broken Link
• cve.org/CVERecord · Third Party Advisory

csweb のその他の脆弱性

• CVE-2025-60949高 7.5Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments. A remote, unauthenticated attacker could send requests …
• CVE-2025-60948中 5.4Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields. A remote, authenticated attacker could store malicious javasc…
• CVE-2025-60946高 8.8Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1…