Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25.8, and 6.x before 6.0.46.1, allow remote authenticated users to inject arbitrary web script or HTML via (1) a saved Workflow name; (2) a Workflow name, related to deletion of a Workflow template; (3) the Content-Type HTTP header; or (4) the name of an uploaded file. NOTE: items 3 and 4 also affect the same version numbers of Xythos Digital Locker (XDL). Some or all vectors might also affect Xythos WebFile Server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xythos Enterprise Document Manager 跨站请求伪造漏洞
Vulnerability Description
Xythos Enterprise Document Manage中存在多个跨站请求伪造漏洞。远程认证用户可以借助(1)一个保存的Workflow名，(2)一个与删除Workflow模板相关Workflow名，(3)Content-Type HTTP头或(4)一个上传的文件名，以任意用户的身份执行指令。
CVSS Information
N/A
Vulnerability Type
N/A