CVE-2022-25267

Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal to upload files...

CVE-2022-25266

Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal to read files...

CVE-2022-25269

Passwork On-Premise Edition before 4.6.13 has multiple XSS issues...

CVE-2022-25268

Passwork On-Premise Edition before 4.6.13 allows CSRF via the groups, password, and history subsystems...

CVE-2022-25267

Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal to upload files...

CVE-2022-25267

Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal to upload files...

Cross site scripting

Passwork On-Premise Edition before 4.6.13 has multiple XSS issues...

Directory traversal

Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal to upload files...

Cross site request forgery (csrf)

Passwork On-Premise Edition before 4.6.13 allows CSRF via the groups, password, and history subsystems...

Directory traversal

Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal to read files...

CVE-2022-25266

Concrete details found: CVE-2022-25266 affects Passwork On-Premise Edition prior to 4.6.13. Root cause is improper restriction of the path name to a restricted directory in the migration/downloadExportFile endpoint, enabling directory traversal to read local files. Impact is reading files on the ...

CVE-2022-25266

Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal to read files...

CVE-2022-25269

Passwork On-Premise Edition before 4.6.13 has multiple XSS issues...

CVE-2022-25269

The CVE-2022-25269 entry concerns Passwork On-Premise Edition prior to 4.6.13 with multiple cross-site scripting (XSS) issues. Root cause: inadequate input handling/web-page structure protections leading to XSS in the affected web interface. Affected software: Passwork On-Premise Edition (version...

CVE-2022-25268

Passwork On-Premise Edition is affected by a CSRF vulnerability in versions prior to 4.6.13. The issue enables cross-site request forgery via the likely exposed subsystems for groups, password, and history. Root cause, as described across sources, is a CSRF flaw in the application’s handling of t...

CVE-2022-25268

Passwork On-Premise Edition before 4.6.13 allows CSRF via the groups, password, and history subsystems...

CVE-2022-25267

Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal to upload files...

CVE-2022-25267

Passwork On-Premise Edition before 4.6.13 is affected by a Directory Traversal in the migration/uploadExportFile functionality. The root cause is an inadequate restriction of the destination path, enabling an attacker to upload arbitrary files to the system. Impact is onboarding of arbitrary file...

Passwork On-Premise Edition 路径遍历漏洞

Passwork On-Premise Edition is a local password manager for your business from Passwork Finland.Passwork On-Premise Edition is vulnerable to path traversal, no detailed vulnerability details are available at this time...

Passwork On-Premise Edition 跨站脚本漏洞

Passwork On-Premise Edition is a local password manager for your business from Passwork Finland. cross-site scripting vulnerability exists in versions prior to Passwork On-Premise Edition 4.6.13, no detailed vulnerability details are currently available...