Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Shindig 信息泄露漏洞
Vulnerability Description
Apache Shindig是美国阿帕奇（Apache）软件基金会的一个开源项目，它提供了OpenSocial的参考实现，并且作为一个参考容器，可在任意网站上运行支持OpenSocial的社交应用。 Apache Shindig 2.5.0版本中的Gadget Renderer中存在XML外部实体注入漏洞。远程攻击者可借助包含外部实体声明与实体引用相结合的XML文档利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A