漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
abhilash1985 PredictApp Cookie new_framework_defaults_7_0.rb deserialization
Vulnerability Description
A vulnerability, which was classified as critical, has been found in abhilash1985 PredictApp. This issue affects some unknown processing of the file config/initializers/new_framework_defaults_7_0.rb of the component Cookie Handler. The manipulation leads to deserialization. The attack may be initiated remotely. The patch is named b067372f3ee26fe1b657121f0f41883ff4461a06. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218387.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
可信数据的反序列化
Vulnerability Title
PredictApp 代码问题漏洞
Vulnerability Description
PredictApp是Abhilash个人开发者的一个预测赢家游戏。 PredictApp存在代码问题漏洞,该漏洞源于组件Cookie Handler中config/initializers/new_framework_defaults_7_0.rb文件的一些未知处理存在问题,攻击者利用该漏洞可能会导致反序列化。
CVSS Information
N/A
Vulnerability Type
N/A