Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3 Patch 1 allow remote attackers to hijack the authentication of admins for requests that (1) add group plans via admin/group_plans.html or (2) add extra packages via admin/extra_packs/create_extra_pack.html.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Parallels 多个跨站请求伪造漏洞
Vulnerability Description
Parallels H-Sphere提供面向Linux、BSD 和Windows平台的多服务器主机自动化解决方案。 Parallels H-Sphere 3.3 Patch 1中存在多个跨站请求伪造(CSRF)漏洞。远程攻击者可利用该漏洞劫持管理身份验证的(1)通过admin/group_plans.html，添加组计划或(2)通过admin/extra_packs/create_extra_pack.html，添加额外的数据包的请求。
CVSS Information
N/A
Vulnerability Type
N/A