漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been uploaded to the WebFlux application, or overwrite arbitrary files with multipart request data.
CVSS Information
N/A
Vulnerability Type
特权管理不恰当
Vulnerability Title
Vmware Spring Framework 权限许可和访问控制问题漏洞
Vulnerability Description
Vmware Spring Framework是美国威睿(Vmware)公司的一套开源的Java、JavaEE应用程序框架。该框架可帮助开发人员构建高质量的应用。 Spring Framework 存在权限许可和访问控制问题漏洞,该漏洞允许攻击者绕过访问限制来读取或修改数据。
CVSS Information
N/A
Vulnerability Type
N/A