Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advanced_filter parameter (aka the Search Parameter).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Eramba 跨站脚本漏洞
Vulnerability Description
Eramba是英国Eramba公司的一款开源的企业级IT治理应用程序。该程序具有IT安全、合规性审计分析等功能。 Eramba e1.0.6.033版本中的reviews/filterIndex/ThirdPartyRiskReview存在跨站脚本漏洞，该漏洞源于程序没有正确的验证用户提交的输入。远程攻击者可借助‘advanced_filter’参数利用该漏洞在用户的Web浏览器中执行脚本。
CVSS Information
N/A
Vulnerability Type
N/A