InfoDoc Document On-line Submission and Approval System 22567
Approved changes feed: RSS · Atom
cpe:2.3:a:infodoc:document_on-line_submission_and_approval_system:22567:*:*:*:*:*:*:*part: a version: 22567 update: *
| Vendor | Infodoc (e3fba580-cc2f-5ef3-abb8-1a8d3a9838ff) |
|---|---|
| Product | Document On Line Submission And Approval System (0d7ea70a-02eb-5c32-b285-0a0ad582b73e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-37290 |
vulnerable | 2026-06-08 06:08:15.087035 |
InfoDoc Document On-line Submission and Approval System - Server-Side Request Forgery (SSRF)
HIGH (7.5)
InfoDoc Document On-line Submission and Approval System lacks sufficient restrictions on the available tags within its HTML to PDF conversion function, and allowing an unauthenticated attackers to load remote or local resources through HTML tags such as iframe. This vulnerability allows unauthenticated remote attackers to perform Server-Side Request Forgery (SSRF) attacks, gaining unauthorized access to arbitrary system files and uncovering the internal network topology.
Published: 2023-07-20T10:55:16.588Z
Updated: 2024-10-24T14:56:44.738Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37289 |
vulnerable | 2026-06-08 06:08:15.086204 |
InfoDoc Document On-line Submission and Approval System - Arbitrary File Upload
CRITICAL (9.8)
It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service. This issue affects Document On-line Submission and Approval System: 22547, 22567.
Published: 2023-07-20T02:45:25.479Z
Updated: 2024-10-24T18:46:57.664Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.