Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, which allows remote attackers to generate reports and organize comments via API functions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ushahidi 身份认证漏洞
Vulnerability Description
Ushahidi Platform 2.5之前版本中的API评论中的(1)报告API和(2)管理函数中存在漏洞，该漏洞源于不需要身份认证。远程攻击者可利用该漏洞通过API函数，生成报告并组织评论。
CVSS Information
N/A
Vulnerability Type
N/A