Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
DigiLIBE 3.4 and possibly other versions sends a redirect but does not exit, which allows remote attackers to obtain sensitive configuration information via a direct request to configuration/general_configuration.html.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DigiLIBE 重定向后执行信息泄露漏洞
Vulnerability Description
DigiLIBE是一款面向中小型企业用户的数据管理系统软件,可以用作非结构化数据的离线存储库。 DigiLIBE 3.4和其他版本中存在漏洞，该漏洞源于程序发送重定向但是不退出。通过定向请求到configuration/general_configuration.html链接，远程攻击者利用该漏洞获得敏感配置信息。
CVSS Information
N/A
Vulnerability Type
N/A