CVE-2023-6673

The CVE-2023-6673 entry describes a Reflected XSS in CyberMath (National Keep Cyber Security Services) caused by improper input neutralization during web page generation. Affected version: CyberMath v1.4 prior to v1.5. Impact is cross-site scripting via reflected input; exploitation details are n...

CVE-2023-6672

The CVE-2023-6672 entry documents a Stored XSS in CyberMath (National Keep Cyber Security Services) caused by Improper Neutralization of Input During Web Page Generation in CyberMath versions 1.4 prior to 1.5. The issue arises from unsafe handling of input during web page rendering, enabling scri...

CVE-2024-7108

CVE-2024-7108 describes an Incorrect Authorization vulnerability in National Keep Cyber Security Services’ CyberMath. The issue allows accessing functionality that is not properly constrained by ACLs, affecting CyberMath versions prior to CYBM.240816253. The NVD/Red Hat and related sources corrob...

CVE-2023-6675

CVE-2023-6675 affects National Keep CyberMath. The issue is an Unrestricted Upload of a File with a Dangerous Type in CyberMath versions 1.4 and earlier (pre-1.5), enabling an attacker to upload a web shell to the web server. The root cause is an improper validation of uploaded file types, allowi...

CVE-2024-7107

CVE-2024-7107 affects National Keep Cyber Security Services’ CyberMath. A directory traversal/file-access vulnerability allows external parties to collect data from common resource locations in CyberMath versions before CYBM.240816253. The issue is described across multiple sources (Red Hat, CVE ...

CVE-2023-6676

CVE-2023-6676 describes a Cross-Site Request Forgery (CSRF) vulnerability in CyberMath by National Keep Cyber Security Services. Affected versions are v1.4 prior to v1.5, where CSRF could allow unauthorized actions on behalf of an authenticated user. Root cause details in connected sources point ...