CVE-2021-31862

Description

References

• RobertDra/CVE-2021-31862 · Exploit
• sysaid.com/product/on-premise/latest-release · Release Notes

sysaid의 다른 취약점

• CVE-2025-2777심각 9.8SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing funct…
• CVE-2025-2776심각 9.8EXPLOITED (CISA KEV)SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing…
• CVE-2025-2775높음 7.5EXPLOITED (CISA KEV)SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing fu…
• CVE-2024-36394심각 9.8SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
• CVE-2024-36393심각 9.8SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')