Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Server side request forgery exists in the runtime application in K2 smartforms 4.6.11 via a modified hostname in an https://*/Identity/STS/Forms/Scripts URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
K2 smartforms runtime应用程序安全漏洞
Vulnerability Description
K2 smartforms是美国K2公司的一款基于浏览器的智能表单添加工具。 K2 smartforms 4.6.11版本中的runtime应用程序存在服务器端请求伪造漏洞。攻击者可通过修改https://*/Identity/STS/Forms/Scripts URL中的主机名利用该漏洞操纵数据。
CVSS Information
N/A
Vulnerability Type
N/A