Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A privileged user can achieve code execution on the server via a ticket because of improper access control of uploaded resources. This might be exploitable in conjunction with CVE-2020-13992 by an unauthenticated attacker.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Klemen Stirn HESK 代码注入漏洞
Vulnerability Description
Klemen Stirn HESK是斯洛文尼亚Klemen Stirn公司的一套带有集成知识库的帮助台软件。 Klemen Stirn HESK 3.1.0版本至2019.1.0版本中的Mods存在安全漏洞，该漏洞源于程序没有对上传的资源进行正确的访问控制。攻击者可利用该漏洞在服务器上执行代码。
CVSS Information
N/A
Vulnerability Type
N/A