CVE-2019-17488

Description

References

• b3log/symphony · Exploit

symphony의 다른 취약점

• CVE-2024-23049심각 9.8An issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via the log4j component.
• CVE-2018-16249보통 4.8In Symphony before 3.3.0, there is XSS in the Title under Post. The ID "articleTitle" of this is stored in the "articleTitle" JSON field, an…
• CVE-2019-9142보통 6.1An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/Setting…
• CVE-2018-10469심각 9.8b3log Symphony (aka Sym) 2.6.0 allows remote attackers to upload and execute arbitrary JSP files via the name[] parameter to the /upload URI…
• CVE-2017-16821보통 5.4b3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as demonstrated by a crafted X-Forwarded-For H…