Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports via the "/ossim/report/wizard_email.php" script. Besides offering an export via a local download, the script also offers the possibility to send out any report via email to a given address (either in PDF or XLS format). Since there is no anti-CSRF token protecting this functionality, it is vulnerable to Cross-Site Request Forgery attacks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AlienVault USM 跨站请求伪造漏洞
Vulnerability Description
AlienVault USM是美国AlienVault公司的一套安全管理平台。该平台提供安全监控、安全事件管理和报告、威胁感知系统等功能。 AlienVault USM 5.4.2及之前的版本中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞导出生成的报告，并将报告通过邮件发送到给定的地址。
CVSS Information
N/A
Vulnerability Type
N/A