Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libxslt 访问控制错误漏洞
Vulnerability Description
libxslt是一款XSLT（用于定义XML转换的XML语言）C库。 libxslt 1.1.33及之前版本中存在访问控制错误漏洞，该漏洞源于当xsltCheckRead和xsltCheckWrite返回‘-1’时，callers函数并没有对其进程检测并允许进行访问。攻击者可利用该漏洞绕过保护机制。
CVSS Information
N/A
Vulnerability Type
N/A