Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Draytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Draytek VigorConnect 跨站请求伪造漏洞
Vulnerability Description
Draytek VigorConnect是中国居易科技（Draytek）公司的一种易于使用、重量轻、用于 DrayTek 产品的单站点中央管理系统。 Draytek VigorConnect 1.6.0-B3 版本存在跨站请求伪造漏洞，该漏洞源于软件缺乏跨站请求伪造保护，并不能充分验证提交请求的用户是否有意提供格式良好、有效、一致的请求。
CVSS Information
N/A
Vulnerability Type
N/A