Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-25512 · ADVISORY
• FreeTAKTeam/UI · WEB
• FreeTAKTeam/UI · PACKAGE
• pypi.org/project/freetakserver-ui · PACKAGE
• GitHub Advisory GHSA-9988-f88m-mr42 · ADVISORY

freetakserver-ui의 다른 취약점

• CVE-2022-25511보통 6.5An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anyw…
• CVE-2022-25507보통 5.4FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Callsign parameter.
• CVE-2022-25506보통 6.5FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser.