SimpleHelp Path Traversal Vulnerability

Mô tả

Tham khảo

• simple-help.com/kb---security-vulnerabilities-01-2025 · Vendor Advisory
• horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software · Third Party Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations · Technical Description
• trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-dragonforce · Third Party Advisory
• CISA KEV · CVE-2024-57728

Lỗ hổng khác của simplehelp

• CVE-2026-48558NGHIÊM TRỌNG 10.0ĐANG BỊ KHAI THÁC (CISA KEV)SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication …
• CVE-2025-36728CAO 8.8Cross-Site Request Forgery (CSRF) vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.11.
• CVE-2025-36727CAO 8.8Inclusion of Functionality from Untrusted Control Sphere vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.12.
• CVE-2024-57727CAO 7.5ĐANG BỊ KHAI THÁC (CISA KEV)SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated re…
• CVE-2024-57726NGHIÊM TRỌNG 9.9ĐANG BỊ KHAI THÁC (CISA KEV)SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with exce…