CVE-2023-28883

Description

References

• cerebrate-project/cerebrate commit 5f1c99c · Patch
• zigrin.com/advisories/cerebrate-blind-sql-injection · Third Party Advisory

cerebrate의 다른 취약점

• CVE-2023-41908보통 5.3Cerebrate before 1.15 lacks the Secure attribute for the session cookie.
• CVE-2023-41363보통 4.3In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users.
• CVE-2023-26468심각 9.1Cerebrate 1.12 does not properly consider organisation_id during creation of API keys.
• CVE-2022-25321보통 6.1An issue was discovered in Cerebrate through 1.4. XSS could occur in the bookmarks component.
• CVE-2022-25320보통 5.3An issue was discovered in Cerebrate through 1.4. Username enumeration could occur.