Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the filesystem by specifying the file path.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MIK.starlight 输入验证错误漏洞
Vulnerability Description
MIK.starlight是部门访问和创建仪表板、报告和规划环境。 MIK.starlight 存在输入验证错误漏洞，该漏洞源于产品的AdminGetFirstFileContentByFilePath未对用户输入的路径数据做有效验证。攻击者可通过该漏洞访问任意路径文件。以下产品及版本受到影响：Starlight 7.9.5.24363。
CVSS Information
N/A
Vulnerability Type
N/A