Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Liman 0.7 - Cross-Site Request Forgery (Change Password)
Vulnerability Description
Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting unauthorized requests.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Vulnerability Type
跨站请求伪造(CSRF)
Vulnerability Title
Liman 安全漏洞
Vulnerability Description
Liman是Liman MYS开源的一个应用程序。允许以稳定和安全的方式远程集中管理组织中的所有服务器、客户端和网络设备。 Liman 0.7版本存在安全漏洞，该漏洞源于缺少适当的请求验证，可能导致跨站请求伪造攻击。
CVSS Information
N/A
Vulnerability Type
N/A