Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header. If this leaks, then third parties may discover password-reset hashes, file-delete links, or other sensitive information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MFScripts YetiShare 安全漏洞
Vulnerability Description
MFScripts YetiShare是一个文件托管脚本，可让您创建高级文件共享服务。 MFScripts YetiShare v3.5.2版本至v4.5.4版本存在安全漏洞，该漏洞源于程序将敏感信息放在‘Referer’标头中。攻击者利用该漏洞获取用于密码重置的哈希值，文件删除链接或其他敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A