CVE-2021-27653

Mô tả

Tham khảo

• collaborate.pega.com/discussion/pega-security-advisory-%E2%80%93-b21 · Vendor Advisory
• robertwillishacking.com/census-vulnerability-exposes-10k-oauth-tokens-thousands-of-user-records · Exploit

Lỗ hổng khác của infinity

• CVE-2024-10716TRUNG BÌNH 4.8Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search.
• CVE-2024-10094NGHIÊM TRỌNG 9.8Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code
• CVE-2024-6702TRUNG BÌNH 4.8Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.
• CVE-2024-6701TRUNG BÌNH 4.8Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type.
• CVE-2024-6700TRUNG BÌNH 4.8Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name.