Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing the use of external entities. This issue can be exploited by an attacker sending a crafted HTTP request in order to exfiltrate information or cause a Denial of Service.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OCS Inventory 安全漏洞
Vulnerability Description
OCS Inventory是OCS Inventory团队开发的一套资产管理软件。该软件能够帮助管理员掌握计算机软件安装和配置，以及在HTTP代理和服务器之间实现低网络流量通讯。 OCS Inventory 2.4.1版本中存在XML外部实体注入漏洞，该漏洞源于程序没有正确的配置XML的解析，进而可以使用外部实体。攻击者可通过发送特制的HTTP请求利用该漏洞泄露信息或造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A