PT-2024-17686 · Chunghwa Telecom · Tenderdoctransfer

Name of the Vulnerable Software and Affected Versions: TenderDocTransfer from Chunghwa Telecom affected versions not specified Description: The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the API...

CVE-2024-12641: Improper Neutralization of Input During Web Page Generation

TenderDocTransfer from Chunghwa Telecom has a Reflected Cross-site scripting vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenticated remote attackers could use...

CVE-2024-12642: Cross-Site Request Forgery (CSRF)

TenderDocTransfer from Chunghwa Telecom has an Arbitrary File Write vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenticated remote attackers could use these APIs...