Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CSV file polluted with malicious JavaScript.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Eramba 跨站脚本漏洞
Vulnerability Description
Eramba是英国Eramba公司的一款开源的企业级IT治理应用程序。该程序具有IT安全、合规性审计分析等功能。 Eramba e1.0.6.033版本中的/importTool/preview URI的CSV file inclusion tab的错误页面存在跨站脚本漏洞，该漏洞源于程序没有正确的验证用户提交的输入。远程攻击者可通过导入特制的CSV文件利用该漏洞在用户浏览器中执行脚本。
CVSS Information
N/A
Vulnerability Type
N/A