Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OrientDB 3.0.17 Cross-Site Request Forgery
Vulnerability Description
OrientDB 3.0.17 GA Community Edition contains cross-site request forgery vulnerabilities that allow attackers to perform unauthorized actions by crafting malicious requests to endpoints like /database/, /command/, and /document/. Attackers can create or delete databases, modify schema classes, manage users, and create functions by sending authenticated requests without token validation, combined with reflected and stored cross-site scripting vulnerabilities in the web interface.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Vulnerability Type
跨站请求伪造(CSRF)
Vulnerability Title
OrientDB 跨站请求伪造漏洞
Vulnerability Description
OrientDB是OrientDB开源的一个多模型数据库。 OrientDB 3.0.17版本存在跨站请求伪造漏洞，该漏洞源于端点缺少令牌验证，可能导致跨站请求伪造攻击。
CVSS Information
N/A
Vulnerability Type
N/A