Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 places a CSRF token in the sec_token parameter of a URI, which makes it easier for remote attackers to defeat a CSRF protection mechanism by leveraging logging.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Roland Gruber Softwareentwicklung LDAP Account Manager 安全漏洞
Vulnerability Description
Roland Gruber Softwareentwicklung LDAP Account Manager是一款LDAP账户管理器，用于管理LDAP目录中的各类账户类型。 Roland Gruber Softwareentwicklung LDAP Account Manager 6.3之前版本中存在安全漏洞，该漏洞源于程序将跨站请求伪造令牌放在URI的‘sec_token’参数中。远程攻击者可利用该漏洞破坏跨站请求伪造保护机制。
CVSS Information
N/A
Vulnerability Type
N/A