SmartBear Collaborator Server 15.1.15101 - Path Traversal (Zip-Slip) in the DOOR — Detect

Fingerprint / reachability check for SmartBear Collaborator Server 15.1.15101 - Path Traversal Zip-Slip in the DOORS/Simulink Review-File Upload Leading to Groovy Server Page Execution CWE-22 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for SmartBear Collaborator Server 15.1.15101 - Pat...

SmartBear Collaborator Server 15.1.15101 DOORS Upload Path Traversal

SmartBear Collaborator Server version 15.1.15101 contains a post-authentication ZIP path traversal in DOORS review-file uploads that can write a Groovy Server Page into the webroot, leading to command execution. https://packetstorm.news/download/235398...

EUVD-2020-18748

Malware in sbrugna...

Deserialization of untrusted data

In SmartBear Collaborator Server through 13.3.13302, use of the Google Web Toolkit GWT API introduces a post-authentication Java deserialization vulnerability. The application's UpdateMemento class accepts a serialized Java object directly from the user without properly sanitizing it. A malicious...

CVE-2020-26118: Deserialization of Untrusted Data

In SmartBear Collaborator Server through 13.3.13302, use of the Google Web Toolkit GWT API introduces a post-authentication Java deserialization vulnerability. The application's UpdateMemento class accepts a serialized Java object directly from the user without properly sanitizing it. A malicious...

PT-2021-11212

Name of the Vulnerable Software and Affected Versions: SmartBear Collaborator Server versions prior to 13.3.13302 Description: The issue arises from the use of the Google Web Toolkit GWT API, introducing a post-authentication Java deserialization vulnerability. Specifically, the application's...