CVE-2021-35232

Mô tả

Tham khảo

• support.solarwinds.com/SuccessCenter/s/article/Web-Help-Desk-12-7-7-Hotfix-1-Release-Notes · Release Notes
• solarwinds.com/trust-center/security-advisories/CVE-2021-35232 · Vendor Advisory

Lỗ hổng khác của webhelpdesk

• CVE-2021-35254CAO 8.8SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input…
• CVE-2019-16959TRUNG BÌNH 6.5SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket.
• CVE-2019-16957TRUNG BÌNH 5.4SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account.
• CVE-2019-16955TRUNG BÌNH 5.4SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request.
• CVE-2019-20002CAO 7.8Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privileged user in the Subjec…