admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-06-10 02:04:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update TWCERT/CC CVE-2023-37288

Browse Source
This commit is contained in:
TARA HSIAO 2023-07-10 14:27:05 +08:00
parent 692546f176
commit b6dac56a0f
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
2023/37xxx/CVE-2023-37288.json
View File

@ -2,7 +2,7 @@
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2023-07-10T01:02:00.000Z",
"DATE_PUBLIC": "2023-07-10T06:02:00.000Z",
"ID": "CVE-2023-37288",
"STATE": "PUBLIC",
"TITLE": "SmartBPM.NET - Path Traversal"
@ -19,14 +19,14 @@
"version_data": [
{
"version_affected": "=",
"version_value": "6.70"
"version_value": " 6.70"
}
]
}
}
]
},
"vendor_name": "SamrtSoft"
"vendor_name": "SmartSoft"
}
]
}
@ -38,7 +38,7 @@
"description_data": [
{
"lang": "eng",
"value": "SmartBPM.NET has a vulnerability of using hard-coded authentication key. An unauthenticated remote attacker can exploit this vulnerability to access system with regular user privilege to read application data, and execute submission and approval processes."
"value": "SmartBPM.NET component has a vulnerability of path traversal within its file download function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files."
}
]
},