References https://nvd.nist.gov/vuln/detail/CVE-2023-40403 https://www.cvedetails.com/cve/CVE-2023-40403/ https://nsfocusglobal.com/apple-multiple-product-security-vulnerabilities-notification/ https://access.redhat.com/security/cve/CVE-2023-40403 https://github.com/advisories/ghsa-j822-w26r-9cxf https://support.apple.com/en-us/120945 https://app.opencve.io/cve/CVE-2023-40403 https://radar.offseq.com/threat/cve-2023-40403-processing-web-content-may-disclose-6eb1da78
Related Vulnerabilities仁和兴业(深圳)软件有限公司仁和云ERP weChatAppletgetGoodsList.action 存在SSRF漏洞仁和兴业(深圳)软件有限公司仁和云ERP purchaseOrdersaveOrderApplet.action存在反序列化漏洞关于U8cloud所有版本u8capplet.jsp存在XSS漏洞的安全公告PoCCVE-2022-35413: WAPPLES Web Application Firewall <=6.0 - Hardcoded CredentialsPoCapple-cups-exposure: Apple CUPS Sources - ExposurePoCapplezeed-sqli: Applezeed - SQL InjectionPoCwapples-firewall-lfi: Wapples Web Application Firewall - Local File InclusionApple Filing Protocol(AFP) 未授权访问漏洞关于NC及NC Cloud系统的wsncapplet.jsp信息泄漏漏洞的安全通告Multiple Apple products CVE-2018-4222越界读取漏洞Apple Filing Protocol(AFP) 弱口令漏洞Apple Webkit CVE-2021-1879 释放后重利用漏洞Apple多个产品条件竞争漏洞(CVE-2023-42974)