Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privileged user in the Subject field of a help request form) that is mishandled in a TicketActions/view?tab=group TSV export by an admin user.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SolarWinds WebHelpDesk 代码注入漏洞
Vulnerability Description
SolarWinds WebHelpDesk是美国SolarWinds公司的一套服务台和资产管理软件。该软件支持集中式知识库、IT资产管理、项目和任务管理等功能。 SolarWinds WebHelpDesk 12.7.1版本中的导出功能存在安全漏洞。攻击者可借助恶意的payloads利用该漏洞造成用户访问恶意的超链接或执行命令等。
CVSS Information
N/A
Vulnerability Type
N/A