Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in saveProperties.html in Corporater EPM Suite allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Corporater EPM Suite 跨站请求伪造漏洞
Vulnerability Description
Corporater EPM Suite是挪威Corporater公司的一套绩效管理解决方案。该解决方案包括绩效考核、成本核算、业务统计分析和平衡记分卡等。 Corporater EPM Suite中的saveProperties.html页面中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞劫持任意用户更改密码请求的身份认证。
CVSS Information
N/A
Vulnerability Type
N/A