Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Absolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 allows remote attackers to read or delete arbitrary files via a full pathname.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GE Digital Energy MDS PulseNET和MDS PulseNET Enterprise 绝对路径遍历漏洞
Vulnerability Description
GE Digital Energy MDS PulseNET和MDS PulseNET Enterprise都是美国通用电气（GE）公司的产品。GE Digital Energy MDS PulseNET是一套用于监控工业通讯网络设备的软件。MDS PulseNET Enterprise是其中的一个企业版。 GE Digital Energy MDS PulseNET和MDS PulseNET Enterprise 3.1.5之前版本的FileDownloadServlet中的下载功能中存在绝对路径遍历漏
CVSS Information
N/A
Vulnerability Type
N/A