漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
CSV Injection in usage report downloaded from Pivotal Application Manager
Vulnerability Description
Pivotal Application Manager, versions 666.0.x prior to 666.0.36, versions 667.0.x prior to 667.0.22, versions 668.0.x prior to 668.0.21, versions 669.0.x prior to 669.0.13, and versions 670.0.x prior to 670.0.7, contain a vulnerability where a remote authenticated user can create an app with a name such that a csv program can interpret into a formula and gets executed. The malicious user can possibly gain access to a usage report that requires a higher privilege.
CVSS Information
N/A
Vulnerability Type
输出中的特殊元素转义处理不恰当(注入)
Vulnerability Title
Pivotal Software Application Manager 安全漏洞
Vulnerability Description
Pivotal Software Application Manager是美国Pivotal Software公司的一套基于Web的应用程序管理解决方案。 Pivotal Software Application Service中的Apps Manager存在安全漏洞。远程攻击者可通过创建特制应用程序利用该漏洞提升权限。以下产品及版本受到影响：Pivotal Software Application Service 2.6.5之前的2.6版本，2.4.14之前的2.4.14版本，2.5.1之前的2.5版本
CVSS Information
N/A
Vulnerability Type
N/A