Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
REDCap before 5.0.4 and 5.1.x before 5.1.3 does not reject certain undocumented syntax within branching logic and calculations, which allows remote authenticated users to bypass intended access restrictions via (1) the Online Designer or (2) the Data Dictionary upload, as demonstrated by an eval call.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
REDCap 权限许可和访问控制问题漏洞
Vulnerability Description
REDCap是美国范德堡大学（Vanderbilt University）的一个多机构联合发起的一款免费的、安全的、基于Web的应用程序。该系统的设计是用来支持数据挖掘的研究。 REDCap 5.0.3及之前的版本和5.1.3之前的5.1.x版本中存在漏洞，该漏洞源于程序没有拒绝在分支逻辑和计算中的特定未记录的语法。远程经过授权的攻击者可通过(1)Online Designer或(2)Data Dictionary的上传利用该漏洞绕过预期的访问限制。
CVSS Information
N/A
Vulnerability Type
N/A