Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to execute arbitrary code in the chat notification window, due to improper rendering of chat messages. A successful exploit could allow an attacker to steal session cookies, perform directory traversal, and execute arbitrary scripts in the context of the Connect client.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mitel MiVoice Connect Client 路径遍历漏洞
Vulnerability Description
Mitel MiVoice Connect Client before 214.100.1223.0版本存在安全漏洞，该漏洞允许攻击者在聊天通知窗口中执行任意代码，这是由于聊天消息的渲染不当造成的。成功利用漏洞可以让攻击者窃取会话cookie、执行目录遍历，并在连接客户机的上下文中执行任意脚本。
CVSS Information
N/A
Vulnerability Type
N/A