CVE-2021-27653

Description

References

• collaborate.pega.com/discussion/pega-security-advisory-%E2%80%93-b21 · Vendor Advisory
• robertwillishacking.com/census-vulnerability-exposes-10k-oauth-tokens-thousands-of-user-records · Exploit

infinity의 다른 취약점

• CVE-2024-10716보통 4.8Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search.
• CVE-2024-10094심각 9.8Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code
• CVE-2024-6702보통 4.8Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.
• CVE-2024-6701보통 4.8Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type.
• CVE-2024-6700보통 4.8Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name.