Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
TERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLUNA Server Framework for Java (Rich) 2.0.0.2 to 2.0.5.1 are vulnerable to a ClassLoader manipulation vulnerability due to using the old version of Spring Framework which contains the vulnerability.The vulnerability is caused by an improper input validation issue in the binding mechanism of Spring MVC. By the application processing a specially crafted file, arbitrary code may be executed with the privileges of the application.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NTT DATA TERASOLUNA 输入验证错误漏洞
Vulnerability Description
NTT DATA TERASOLUNA是日本NTT DATA公司的一个 NTT DATA 的框架。 NTT DATA TERASOLUNA Global Framework 1.0.0版本和TERASOLUNA Server Framework for Java (Rich) 2.0.0.2至2.0.5.1版本存在安全漏洞，该漏洞源于其Spring MVC的绑定机制中的输入验证不当导致攻击者通过应用程序处理特制文件，可以使用应用程序的权限执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A