Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution (involving a ContactCommon field) on victims who click on a crafted link, aka XSS.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ConnectWise Manage 跨站脚本漏洞
Vulnerability Description
ConnectWise Manage是美国ConnectWise公司的一套业务管理解决方案。该方案提供流程管理、技术控制和自动化服务交付等功能。 ConnectWise Manage 2017.5版本中services/system_io/actionprocessor/Contact.rails存在跨站脚本漏洞。远程攻击者可通过诱使用户点击特制的链接利用该漏洞执行任意客户端JavaScript代码。
CVSS Information
N/A
Vulnerability Type
N/A