CVE:CVE-2023-22580
CNNVD:CNNVD-202301-822
Tiki Wiki CMS Groupware是一套基于Wiki的开源内容管理系统和在线办公套件。
Tiki Wiki CMS Groupware 24.0版本及之前版本存在安全漏洞，该漏洞源于在 grid.php 中存在 PHP 对象注入。
solution:Upgrade sequelizejs sequelize to a higher version than 6.28.1,7.0.0:alpha1,7.0.0:alpha10,7.0.0:alpha11,7.0.0:alpha12,7.0.0:alpha13,7.0.0:alpha14,7.0.0:alpha15,7.0.0:alpha16,7.0.0:alpha17,7.0.0:alpha18,7.0.0:alpha19,7.0.0:alpha2,7.0.0:alpha2.1,7.0.0:alpha2.2,7.0.0:alpha3,7.0.0:alpha4,7.0.0:alpha5,7.0.0:alpha6,7.0.0:alpha7,7.0.0:alpha8,7.0.0:alpha9,7.0.0:oc_test_1,7.0.0:oc_test_2,7.0.0:oc_test_3,7.0.0:oc_test_4,and avoid the version (,6.28.1),7.0.0:alpha1,7.0.0:alpha10,7.0.0:alpha11,7.0.0:alpha12,7.0.0:alpha13,7.0.0:alpha14,7.0.0:alpha15,7.0.0:alpha16,7.0.0:alpha17,7.0.0:alpha18,7.0.0:alpha19,7.0.0:alpha2,7.0.0:alpha2.1,7.0.0:alpha2.2,7.0.0:alpha3,7.0.0:alpha4,7.0.0:alpha5,7.0.0:alpha6,7.0.0:alpha7,7.0.0:alpha8,7.0.0:alpha9,7.0.0:oc_test_1,7.0.0:oc_test_2,7.0.0:oc_test_3,7.0.0:oc_test_4