References https://nvd.nist.gov/vuln/detail/CVE-2023-42138 https://jvn.jp/en/vu/JVNVU94752076/index.html https://www.keyence.com/vulnerability231001 https://www.keyence.co.jp/vulnerability231001 https://access.redhat.com/security/cve/CVE-2023-42138 https://jvn.jp/vu/JVNVU97069449/ https://jvndb.jvn.jp/ja/contents/2024/JVNDB-2024-003049.html https://www.nsfocus.net/index.php?act=sec_bug&type_id=&os=&keyword=&page=3155
Related Vulnerabilities时空智友ERP系统 /formservice updater.uploadStudioFile 文件上传漏洞PoCCVE-2025-25296: Label Studio < 1.16.0 - Cross-Site ScriptingPoCCVE-2025-47783: Label Studio < 1.18.0 - Reflected XSSLabel Studio存在XSS漏洞(CVE-2025-25296)PoCsupabase-studio-exposure: Supabase Studio - ExposurePoCCVE-2024-14015: Studiocart <= 2.9.0 - Cross-Site ScriptingPoCvscode-settings: Visual Studio Code Settings - Credential ExposurePoCvscode-mcp-json: Visual Studio Code MCP Configuration ("mcp.json") ExposurePoCvscode-slnx-sqlite-disclosure: Visual Studio Code - Slnx.SQLite File DisclosureCherry Studio 未授权 代码注入漏洞Sim Studio AI 服务端请求伪造漏洞(CVE-2025-9805)IBM Watson Studio on Cloud Pak for Data 跨站脚本漏洞