Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. Any authenticated user may execute Groovy code when generating a report, resulting in arbitrary code execution on the underlying server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Determine Contract Lifecycle Management 输入验证错误漏洞
Vulnerability Description
Determine Contract Lifecycle Management（CLM）是美国Determine公司的一套企业合同生命周期管理解决方案。 Determine CLM v5.4版本中的report_edit.jsp文件存在安全漏洞。攻击者可利用该漏洞在该底层服务器上执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A