CVE-2021-36794

Mô tả

Tham khảo

• community.siren.io/c/announcements · Vendor Advisory
• docs.siren.io/index · Release Notes
• docs.siren.io/siren-platform-user-guide/11.1/release-notes.html · Release Notes

Lỗ hổng khác của investigate

• CVE-2023-35857NGHIÊM TRỌNG 9.8In Siren Investigate before 13.2.2, session keys remain active even after logging out.
• CVE-2022-47544NGHIÊM TRỌNG 9.8An issue was discovered in Siren Investigate before 12.1.7. Script variable whitelisting is insufficiently sandboxed.
• CVE-2022-47543TRUNG BÌNH 5.3An issue was discovered in Siren Investigate before 12.1.7. There is an ACL bypass on global objects.
• CVE-2021-31216CAO 8.1Siren Investigate before 11.1.1 contains a server side request forgery (SSRF) defect in the built-in image proxy route (which is enabled by …