CVE-2023-5902

Mô tả

Tham khảo

• pkp/pkp-lib commit 2d04e77 · Patch
• huntr.com/bounties/8b93c7bf-5052-424a-85cc-7e5491c61f20 · Exploit

Lỗ hổng khác của pkp web application library

• CVE-2023-5904TRUNG BÌNH 5.4Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5903TRUNG BÌNH 5.4Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5901TRUNG BÌNH 4.8Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5900TRUNG BÌNH 4.3Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-47271TRUNG BÌNH 5.3PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not ver…