Vulnerabilities in codeBeamer Application Lifecycle Management

Alex Joss and Emanuele Barbeno identified vulnerabilities in Intland Software´s Application-Lifecycle-Management codeBeamer.

Details to these advisories:

CSNC-2020-009 / Cross-Site Request Forgery (CSRF)

CSNC-2020-010 / Insecure Remember-Me Feature 

CSNC-2020-012 / Multiple Cross-Site Scripting (XSS)

 

​​​​​​​

Retour