Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Arbitrary File Upload. The BaseController class, that each of the service controllers derives from, allows for the upload of arbitrary files. If the HTTP request is a multipart/form-data POST request, any parameters with a filename entry will have their content written to a file in the Vocera upload-staging directory with the specified filename in the parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Vocera Report Server 代码问题漏洞
Vulnerability Description
Vocera Report Server是美国Vocera公司的一个报表应用程序。用于从 Vocera 系统软件创建的数据日志中收集数据并构建报告。 Vocera Report Server 和 Voice Server 5.x - 5.8 版本存在安全漏洞，该漏洞源于 BaseController 类是每个服务控制器的基类，它允许上传任意文件。如果 HTTP 请求是一个 multipart/form-data POST 请求，并且其中包含带有文件名条目的参数，这些参数的内容将被写入到指定文件名的文件中，
CVSS Information
N/A
Vulnerability Type
N/A