Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Qt ‘XmlHttpRequest’对象不安全重定向信息泄露漏洞
Vulnerability Description
Digia Qt是芬兰Digia公司的一套跨平台的C++应用程序开发框架。该框架可用于开发GUI程序。 Qt 4.8.4之前版本中的XMLHttpRequest对象中存在漏洞，该漏洞源于程序对文件方案启用了http重定向。通过对QML应用发送file: URL，中间人攻击者可利用该漏洞强制读取任意本地文件并有可能以此获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A