References https://github.com/ibaiw/2023Hvv/blob/main/%E7%99%BE%E5%8D%93Smart%20S85F%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C.md https://github.com/advisories/GHSA-45qq-m2cx-4ggc https://nvd.nist.gov/vuln/detail/CVE-2023-4414 https://cve.imfht.com/detail/CVE-2023-4414?lang=en https://vuldb.com/submit/185751 https://vuldb.com/?submit.191743 https://cve.yack.one/products/byzoro:smart-s85f https://strobes.co/vi/cve/CVE-2023-4414 https://www.clouddefense.ai/cve/2023/CVE-2023-4414 https://www.cisa.gov/news-events/bulletins/sb23-240
Related Vulnerabilities旭辰資訊|SmartIT Desktop Manager - 存在4個漏洞Apache Kafka UI /smartfilters/testexecutions 代码执行漏洞(CVE-2026-5562)PoCCVE-2026-24423: SmarterMail - Remote Code Execution易宝 OA /SmartTradeScan/StockTake/SetScanQty txtBoxNo SQL 注入漏洞太友 QSmart Audit 管理系统存在弱口令PoCSmarterMail ConnectToHub /api/v1/settings/sysadmin/connect-to-hub 命令执行漏洞(CVE-2026-24423)SmarterTools SmarterMail 远程代码执行漏洞(CVE-2026-24423)SmarterTools SmarterMail 权限管理不当漏洞PoCCVE-2026-23760: SmarterTools SmarterMail - Admin Password ResetPoCSmarterMail /api/v1/auth/force-reset-password 权限绕过漏洞SmarterMail 存在任意文件上传漏洞SmarterMail 存在任意密码重置漏洞