CVE-2021-27653

Description

References

• collaborate.pega.com/discussion/pega-security-advisory-%E2%80%93-b21 · Vendor Advisory
• robertwillishacking.com/census-vulnerability-exposes-10k-oauth-tokens-thousands-of-user-records · Exploit

infinity 的其他漏洞

• CVE-2024-10716中危 4.8Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search.
• CVE-2024-10094严重 9.8Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code
• CVE-2024-6702中危 4.8Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.
• CVE-2024-6701中危 4.8Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type.
• CVE-2024-6700中危 4.8Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name.