CVE-2024-46278

Description

References

• ayato-shitomi/CVE-2024-46278-teedy_1.11_account-takeover · Exploit
• ayato-shitomi/teedy_1.11_account-takeover · Exploit

teedy의 다른 취약점

• CVE-2025-11853높음 8.1A vulnerability was determined in Sismics Teedy up to 1.11. This affects an unknown function of the file /api/file of the component API Endp…
• CVE-2024-54852심각 9.8When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injectio…
• CVE-2024-54851높음 8.8Teedy <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF), due to the lack of CSRF protection.
• CVE-2025-22963높음 7.5Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.
• CVE-2023-4892보통 4.6Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker could manipulate. Thanks…