References https://avd.aquasec.com/nvd/2022/cve-2022-45924/ https://github.com/advisories/GHSA-5fcm-cpg2-2p27 https://nvd.nist.gov/vuln/detail/CVE-2022-45924 https://securityvulnerability.io/vulnerability/CVE-2022-45924 https://vulmon.com/vulnerabilitydetails?qid=CVE-2022-45924 https://seclists.org/fulldisclosure/2023/Jan/14 https://sploitus.com/exploit?id=1337DAY-ID-38166 https://cvefeed.io/vuln/detail/CVE-2022-45924 https://www.securityweek.com/critical-vulnerabilities-patched-opentext-enterprise-content-management-system/
Related VulnerabilitiesPoCCVE-2022-27925: Zimbra Collaboration Suite 8.8.15/9.0 - Zip Path TraversalPoC用友NC /ebvp/infopub/showcontent SQL 注入漏洞PoCCVE-2025-34033: Blue Angel Software Suite (5V Technologies) - OS Command InjectionPoCCVE-2026-6639: AI Copilot Content Generator <=1.4.6 - Unauthenticated Task Data ExposurePoCCVE-2026-0743: WP Content Permission <= 1.2 - Cross-Site ScriptingHepta Platforms|Heptabase - Stored Cross-Site ScriptingPoCmixed-active-content: Mixed Active ContentPoCharman-media-suite-lfi: Harman Media Suite <= 4.2.0 - Local File DisclosureServiceNow-AI-Platform /assessment_thanks.do 代码执行漏洞(CVE-2026-6875)PoCCVE-2026-6875: ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCEXWiki Platform /xwiki/bin/skin/ 目录遍历漏洞(CVE-2026-34151)MasterStudy LMS /wp-admin/admin-ajax.php?action=stm_lms_load_content 文件包含漏洞(CVE-2024-3136)WordPress LearnPress /wp-json/lp/v1/load_content_via_ajax 信息泄露漏洞(CVE-2025-11368)