CVE-2020-26517

Mô tả

Tham khảo

• intland.com/codebeamer/application-lifecycle-management · Vendor Advisory
• compass-security.com/fileadmin/Research/Advisories/2021-10_CSNC-2020-012-codebeamer_ALM_XSS.txt · Exploit

Lỗ hổng khác của codebeamer

• CVE-2023-4296TRUNG BÌNH 6.1​If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code…
• CVE-2020-26516CAO 8.8A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. Requests sent to the server that trigger actions do not contain…
• CVE-2020-26515CAO 7.5An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The remember-me cookie (CB_LOG…
• CVE-2020-26513TRUNG BÌNH 5.5An issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The ReqIF XML data, used by the codebeamer ALM application to impor…
• CVE-2019-20635TRUNG BÌNH 6.1codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed…