CVE-2019-5925

Mô tả

Tham khảo

• jvn.jp/en/jp/JVN40288903/index.html · Third Party Advisory
• dradisframework.com/ce/security_reports.html · Vendor Advisory

Lỗ hổng khác của dradis

• CVE-2023-50458TRUNG BÌNH 4.3In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about other users' jobs.
• CVE-2023-50786TRUNG BÌNH 4.3Dradis through 4.16.0 allows referencing external images (resources) over HTTPS, instead of forcing the use of embedded (uploaded) images. T…
• CVE-2023-31223TRUNG BÌNH 5.4Dradis before 4.8.0 allows persistent XSS by authenticated author users, related to avatars.
• CVE-2022-30028TRUNG BÌNH 5.9Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token.
• CVE-2019-19946TRUNG BÌNH 6.5The API in Dradis Pro 3.4.1 allows any user to extract the content of a project, even if this user is not part of the project team.