SHIRASAGI 跨站脚本漏洞

SHIRASAGI is a content management system CMS for the Japanese Shirasagi project. A security vulnerability exists in versions prior to SHIRASAGI v1.17.0, which stems from a stored cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary script...

JVN#18765463: Multiple cross-site scripting vulnerabilities in SHIRASAGI

SHIRASAGI provided by SHIRASAGI Project contains multiple vulnerabilities listed below. Stored cross-site scripting vulnerability on Schedule function CWE-79 - CVE-2023-22425 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4 CVSS v2|...

SHIRASAGI 跨站脚本漏洞

SHIRASAGI is a content management system CMS for the Japanese Shirasagi project. A security vulnerability exists in versions prior to SHIRASAGI v1.17.0, which stems from a stored cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary script...

CVE-2022-43479

Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users to an arbitrary web site and conduct a phishing attack...

CVE-2022-43499

Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

Cross site scripting

Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

Open redirect

Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users to an arbitrary web site and conduct a phishing attack...

CVE-2022-43479

Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users to an arbitrary web site and conduct a phishing attack...

CVE-2022-43499

CVE-2022-43499 affects SHIRASAGI. A stored cross-site scripting vulnerability allows a remote authenticated attacker with administrative privileges to inject arbitrary script. Affected versions: SHIRASAGI

SHIRASAGI 输入验证错误漏洞

SHIRASAGI is a content management system CMS for the Japanese Shirasagi project. A security vulnerability exists in SHIRASAGI v1.14.4 to v1.15.0, which can be exploited by attackers to redirect users to arbitrary websites and conduct phishing attacks...

CVE-2022-43479

Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users to an arbitrary web site and conduct a phishing attack...

CVE-2022-43499

Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

CVE-2022-43479

CVE-2022-43479 is an open redirect vulnerability affecting SHIRASAGI v1.14.4–v1.15.0. The issue allows remote, unauthenticated attackers to redirect users to arbitrary websites, enabling phishing risk. Public documentation from JVNDB indicates a fix: updated SHIRASAGI to v1.16.0. Other connected ...

CVE-2022-43499

Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

PT-2022-26933 · Shirasagi · Shirasagi

Name of the Vulnerable Software and Affected Versions: SHIRASAGI versions 1.14.4 through 1.15.0 Description: The issue allows a remote unauthenticated attacker to redirect users to an arbitrary web site, potentially conducting a phishing attack. Recommendations: For SHIRASAGI versions 1.14.4...

PT-2022-26946 · Shirasagi · Shirasagi

Name of the Vulnerable Software and Affected Versions: SHIRASAGI versions prior to v1.16.2 Description: A stored cross-site scripting issue allows a remote authenticated attacker with administrative privileges to inject an arbitrary script. Recommendations: For versions prior to v1.16.2, update t...

SHIRASAGI 跨站脚本漏洞

SHIRASAGI is a content management system CMS for the Japanese Shirasagi project. A security vulnerability exists in versions prior to SHIRASAGI v1.16.2, which can be exploited by attackers to inject arbitrary scripts...

CVE-2022-43499

Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

CVE-2022-43479

Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users to an arbitrary web site and conduct a phishing attack...

Multiple vulnerabilities in SHIRASAGI

Overview SHIRASAGI provided by SHIRASAGI Project contains multiple vulnerabilities listed below. Open Redirect CWE-601 - CVE-2022-43479 Stored Cross-site Scripting CWE-79 - CVE-2022-43499 SHIGA TAKUMA of BroadBand Security, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with th...