CVE-2022-31795

An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 Control Center devices before 8.1A SP02 P04. The vulnerability resides in the grelfinfo function in grel.php. An attacker is able to influence the username user, password pw, and file-name file parameters and inject special characters...

GHSA-3JM4-C6QF-JRH3 OpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF)

Summary Lack of CSRF protection on the preview-expression command means that visiting a malicious website could cause an attacker-controlled expression to be executed. The expression can contain arbitrary Clojure or Python code. The attacker must know a valid project ID of a project that contains...

OpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF)

Summary Lack of CSRF protection on the preview-expression command means that visiting a malicious website could cause an attacker-controlled expression to be executed. The expression can contain arbitrary Clojure or Python code. The attacker must know a valid project ID of a project that contains...

CVE-2022-31795

An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 Control Center devices before 8.1A SP02 P04. The vulnerability resides in the grelfinfo function in grel.php. An attacker is able to influence the username user, password pw, and file-name file parameters and inject special characters...

Fujitsu ETERNUS CentricStor CS8000 operating system command injection vulnerability

The Fujitsu ETERNUS CentricStor CS8000 is a unified backup and archiving platform from Fujitsu, Japan. for mainframe and open systems backup, archiving, secondary and object storage. A security vulnerability exists in Fujitsu ETERNUS CentricStor CS8000 version 8.1A SP02 P04, which can be injected...

Fujitsu ETERNUS CS8000 grel.php Code Execution

The vulnerability of the grel.php web interface of the unified console consolidation platform for backup and archiving FUJITSU ETERNUS CS8000 relates to the possibility of executing commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain elevated...

PT-2022-3812

Name of the Vulnerable Software and Affected Versions Fujitsu ETERNUS CentricStor CS8000 versions prior to 8.1A SP02 P04 Description The issue is related to the possibility of command injection in the Fujitsu ETERNUS CentricStor CS8000 device. An attacker can influence the username user, password...