Read Time:18 Second

Posted by Luke Symons on Jul 07

1. INFORMATION

————–

[+] CVE : CVE-2022-43684

[+] Title : Insecure Access Control To Full Admin Compromise

[+] Vendor : ServiceNow

[+] Publication date : June 2023

[+] Credits : Luke Symons, Tony Wu, Eldar Marcussen, Gareth
Phillips, Jeff Thomas, Nadeem Salim, and Stephen Bradshaw.

2. AFFECTED VERSIONS

——————–

* Quebec prior to Patch 10 Hot Fix 8b

* Rome prior to Patch 10 Hot…

Read More

More Stories

Multiple vulnerabilities in CTFd versions <= 3.7.4

Posted by Blazej Adamczyk on Dec 30 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Multiple vulnerabilities in CTFd versions <= 3.7.4 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1 General information ═════════════════════......