CVE-2023-32089

Description

References

• support.pega.com/support-doc/pega-security-advisory-e23-vulnerability-remediation-note · Vendor Advisory

platform의 다른 취약점

• CVE-2023-50166보통 6.1Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.
• CVE-2023-50165높음 8.6Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents.
• CVE-2023-32088보통 6.1 Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation
• CVE-2023-32087보통 6.1 Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation
• CVE-2019-16374심각 9.8Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length. An attacker can speci…