Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive information by reading (1) forbidden pathnames in the revision view, (2) log history that can only be reached by traversing a forbidden object, or (3) forbidden diff view path parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ViewVC 多个远程信息泄露漏洞
Vulnerability Description
ViewVC 1.0.5之前的版本在没有正确的验证访问是否恶意的情况下，提供版本的元数据，远程攻击者可以通过读取(1)版本显示中的禁止的路径名，(2)仅能通过横越禁止的对象才能访问的登陆历史记录，(3)禁止的diff查看路径参数，获得敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A