Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, aka "XSS File Upload."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Engineering SpagoBI 代码问题漏洞
Vulnerability Description
Engineering SpagoBI是意大利Engineering公司的一款开源的基于J2EE框架的商业智能套件。该套件主要用于管理BI对象，如报表、记分卡以及数据挖掘模型等，并可通过BI管理器控制、校验、验证与分发这些BI对象。 Engineering SpagoBI 4.1之前版本中的Worksheet designer存在安全漏洞，该漏洞源于程序没有充分过滤用户提交的输入。攻击者可利用该漏洞上传任意文件，在受影响应用程序上下文中执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A