关联漏洞
标题:Oracle PeopleSoft Enterprise PeopleTools 安全漏洞 (CVE-2023-22047)Description:Oracle PeopleSoft Enterprise PeopleTools是美国甲骨文（Oracle）公司的用于为 PeopleSoft 应用程序提供与用户的需求和期望保持同步的技术。 Oracle PeopleSoft 的 PeopleSoft Enterprise PeopleTools product 存在安全漏洞，该漏洞源于 Portal 模块允许未经身份验证的攻击者通过 HTTP 进行网络访问来危害 PeopleSoft Enterprise PeopleTools。成功攻击此漏洞可能会导
Description
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component- Portal). Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data.
文件快照
id: CVE-2023-22047
info:
name: Oracle Peoplesoft - Unauthenticated File Read
author: tuo4n8
s
...
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮件到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对 POC 代码进行快照，为了长期维护，请考虑为本地 POC 付费/捐赠，感谢您的支持。