Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ABBYY FlexiCapture 安全漏洞
Vulnerability Description
ABBYY FlexiCapture是俄罗斯ABBYY公司的一套可扩展的数据处理和文档提取解决方案。该产品能够智能的从图像文件、电子邮件和文档流中抽取重要数据，并对其进行分类处理。 ABBYY FlexiCapture 12 Release 1 Update 7之前版本中的HTTP API接口存在安全漏洞。攻击者可借助‘FlexiCaptureTmsSts2’参数利用该漏洞绕过安全限制。
CVSS Information
N/A
Vulnerability Type
N/A