漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
An exploitable unauthenticated XML external injection vulnerability was identified in FocalScope v2416. A unauthenticated attacker could submit a specially crafted web request to FocalScope's server that could cause an XXE, and potentially result in data compromise.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FocalScope 安全漏洞
Vulnerability Description
FocalScope是一套基于云的帮助台解决方案。该产品包括电子邮件票务、调查管理和实施聊天工具等。 FocalScope v2416及之前版本中存在XML外部实体注入漏洞。攻击者可通过向FocalScope的服务器提交特制的Web请求利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A