Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
UPOINT @1 Event Publisher stores sensitive information under the web document root with insufifcient access control, which allows remote attackers to read private comments via a direct request to eventpublisher.txt.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
UPOINT Event Publisher 信息泄露漏洞
Vulnerability Description
UPOINT @1 Event Publisher以不足的访问控制权限将敏感信息存储在web文件根目录下。这使得远程攻击者可以借助于对eventpublisher.txt的直接请求读取私有注释。
CVSS Information
N/A
Vulnerability Type
N/A