Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The ConsoleAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows a CSRF attack that results in injecting arbitrary Ruby code (for an eval call) via the CONSOLE_COMMAND_STRING parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Emissary 跨站请求伪造漏洞
Vulnerability Description
Emissary是一个应用软件。一个基于P2P的数据驱动的工作流引擎，可在异构的可能广泛分布的多层P2P网络计算资源中运行。 U.S. National Security Agency (NSA) Emissary 5.9.0 存在跨站请求伪造漏洞，该漏洞源于ConsoleAction组件允许CSRF攻击，导致是通过CONSOLE COMMAND STRING参数注入任意Ruby代码。
CVSS Information
N/A
Vulnerability Type
N/A