CVE-2021-27989

Description

References

• syedsohaibkarim/PoC-StoredXSS-Appspace6.2.4 · Third Party Advisory

appspace의 다른 취약점

• CVE-2021-27704보통 6.5Appspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset page.
• CVE-2021-27990높음 7.5Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the fra…
• CVE-2021-27670심각 9.8Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.
• CVE-2021-27564보통 5.4A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network…