Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or edit a column.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
tianti 安全漏洞
Vulnerability Description
tianti是一套使用Java语言编写的轻量级内容管理系统（CMS）。 tianti 2.3版本中存在安全漏洞。远程攻击者可通过直接访问tianti-module-admin/cms/column/list页面利用该漏洞绕过既定的访问限制，读取列表页面或编辑编辑列。
CVSS Information
N/A
Vulnerability Type
N/A