Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ChangingTec ServiSign - Path Traversal
Vulnerability Description
ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers the component to load malicious DLL files under arbitrary file path and allows the attacker to perform arbitrary system operation and disrupt of service.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
ServiSign 路径遍历漏洞
Vulnerability Description
Changingtec ServiSign是中国台湾全景软件（Changingtec）公司的一个系统。该系统提供了数字签名和验证的跨平台解决方案。 ServiSign存在安全漏洞，该漏洞源于对DLL文件路径中的特殊字符过滤不足。
CVSS Information
N/A
Vulnerability Type
N/A