CVE-2018-17217

Description

References

• ptc.com/en/support/article · Vendor Advisory

thingworx platform 的其他漏洞

• CVE-2018-20092高危 7.5PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request.
• CVE-2018-17218中危 5.4An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function.
• CVE-2018-17216中危 6.5An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users.