Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Userscape HelpSpot before 4.7.2. A cross-site request forgery vulnerability exists on POST requests to the "index.php?pg=password.change" endpoint. This allows an attacker to change the password of another user's HelpSpot account.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Userscape HelpSpot 跨站请求伪造漏洞
Vulnerability Description
Userscape HelpSpot是一套可扩展的开源客户服务软件。 Userscape HelpSpot 4.7.2之前版本中存在跨站请求伪造漏洞。远程攻击者可通过向‘index.php?pg=password.change’端点发送POST请求利用该漏洞更改其他用户的HelpSpot帐户密码。
CVSS Information
N/A
Vulnerability Type
N/A