Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
GIG Technology NV JumpScale Portal 7 version before commit 15443122ed2b1cbfd7bdefc048bf106f075becdb contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in method: notifySpaceModification; that can result in Improper validation of parameters results in command execution. This attack appear to be exploitable via Network connectivity, required minimal auth privileges (everyone can register an account). This vulnerability appears to have been fixed in After commit 15443122ed2b1cbfd7bdefc048bf106f075becdb.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GIG Technology NV JumpScale Portal 操作系统命令注入漏洞
Vulnerability Description
GIG Technology NV JumpScale Portal是一款混合应用程序服务器和Wiki引擎。 GIG Technology NV JumpScale Portal 7 commit 15443122ed2b1cbfd7bdefc048bf106f075becdb之前版本中的method: notifySpaceModification存在操作系统命令注入漏洞，该漏洞源于程序没有正确验证参数。攻击者可利用该漏洞执行命令。
CVSS Information
N/A
Vulnerability Type
N/A