References https://avd.aliyun.com/detail?id=AVD-2022-24239 https://cve.imfht.com/detail/CVE-2022-24239?lang=en https://devhub.checkmarx.com/cve-details/cve-2022-24239/ https://avd.aliyun.com/high-risk/list?page=21 https://cvedetails.com/cve/CVE-2022-24239/ https://www.redpacketsecurity.com/cisa-vulnerability-bulletin-vulnerability-summary-for-the-week-of-may-30-2022/
Related Vulnerabilities仁和兴业(深圳)软件有限公司仁和云ERPbackupexportall 接口存在任意文件读取漏洞PoCCVE-2026-3576: Planyo Online Reservation System <= 3.0 - Arbitrary File ReadVersa Concerto /portalapi/v1/roles/option 权限绕过漏洞(CVE-2025-34027)Campcodes Online Loan Management System /ajax.php SQL 注入漏洞(CVE-2025-9744)PoCCVE-2026-34413: Xerte Online Toolkits <= 3.15 - Remote Code ExecutionTRUfusion Enterprise /trufusionPortal/getProjectList 权限绕过漏洞(CVE-2025-27223)WIFISKY 7层流控路由器 /portal/ibilling/index.php 命令执行漏洞大华智慧园区综合管理平台 /portal/itc/attachment_downloadByUrlAtt.action 文件读取漏洞HIKVISION 综合安防管理平台 /artemis-portal/artemis/env 信息泄露漏洞用友NC /portal/pt/M0dUlE/redeploy SQL 注入漏洞PoCCVE-2025-4576: Liferay Portal & DXP - Cross-Site Scripting天锐绿盾审批系统 /trwfe/login.jsp/.%2e/user/findOnlineUserForPage.do 信息泄露漏洞Liferay Portal/DXP存在XSS漏洞(CVE-2025-4576)