漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in the _serve_request_multiple function in lib/Perlbal/ClientHTTPBase.pm in Perlbal before 1.70, when concat get is enabled, allows remote attackers to read arbitrary files in a parent directory via a directory traversal sequence in an unspecified parameter. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Perlbal serve_request_multiple 目录遍历漏洞
Vulnerability Description
Perlbal 1.70之前的版本的lib/Perlbal/ClientHTTPBase.pm中的_serve_request_multiple函数存在目录遍历漏洞,当concat get被激活时,远程攻击者借助一个未明的参数中的目录遍历,读取任意文件。
CVSS Information
N/A
Vulnerability Type
N/A