Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in IBM UrbanCode Release 6.0.1.6 and earlier, 6.1.0.7 and earlier, and 6.1.1.1 and earlier.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM UrbanCode Release 跨站请求伪造漏洞
Vulnerability Description
IBM UrbanCode Release(UCR)是美国IBM公司的一套用于管理多个相关应用发行及其部署的协作发行软件平台。该平台支持在生命周期模型的每个阶段规划、执行和追踪软件的发行。 IBM UCR 6.0.1.6及之前的版本、6.1.0.7及之前的版本和6.1.1.1及之前的版本中存在跨站请求伪造漏洞,该漏洞源于程序没有正确的验证用户提交的输入。远程攻击者可通过发送畸形的HTTP请求利用该漏洞实施跨站脚本攻击,造成Web缓冲中毒,或执行其他恶意的操作。
CVSS Information
N/A
Vulnerability Type
N/A