Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of form-urlencoded requests. NOTE: this might be used to expose vulnerabilities in applications that would otherwise be protected by the validation routines.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OWASP Stinger绕过servlet输入验证过滤漏洞
Vulnerability Description
"Stinger是开放Web应用安全项目(OWASP)所开发的servlet过滤器，用于提供对用户请求提供集中的输入验证。 OWASP Stinger多部分编码的数据时存在漏洞，远程攻击者可能利用此漏洞绕过数据过滤。 OWASP Stinger假设所传送的请求内容都是form-urlencode编码的，如果应用程序使用的框架从HTTP协议获取内容并自动处理和解析请求的话，这种假设就会导致在向目标应用传输请求期间绕过Stinger过滤。 以下Stinger代码段说明了这个问题(Stinger.java)：
CVSS Information
N/A
Vulnerability Type
N/A