Csharp

Cws Collaborative Development Platform

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-48375

  • EPSS 0.15%
  • Veröffentlicht 15.12.2023 08:15:45
  • Zuletzt bearbeitet 21.11.2024 08:31:35

SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform actions that they should not be allowed to perform via commands. An authenticated with normal use...

9.8

CVE-2023-48376

  • EPSS 0.51%
  • Veröffentlicht 15.12.2023 08:15:45
  • Zuletzt bearbeitet 21.11.2024 08:31:35

SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary files to perform arbit...

6.5

CVE-2023-48374

  • EPSS 0.19%
  • Veröffentlicht 15.12.2023 08:15:44
  • Zuletzt bearbeitet 21.11.2024 08:31:35

SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain p...