Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
InSTEDD Pollit tour_controller.rb TourController Privilege Escalation
Vulnerability Description
A vulnerability was found in InSTEDD Pollit 2.3.1. It has been rated as critical. This issue affects the function TourController of the file app/controllers/tour_controller.rb. The manipulation leads to an unknown weakness. The attack may be initiated remotely. Upgrading to version 2.3.2 is able to address this issue. The patch is named 6ef04f8b5972d5f16f8b86f8b53f62fac68d5498. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-221507.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
N/A
Vulnerability Title
InSTEDD Pollit 安全漏洞
Vulnerability Description
Pollit是InSTEDD开源的一个应用程序。有助于您利用短信的便捷性，在方便的时候向受众进行调查。 InSTEDD Pollit 2.3.1版本存在安全漏洞，该漏洞源于文件app/controllers/tour_controller.rb的函数TourController存在问题。
CVSS Information
N/A
Vulnerability Type
N/A