漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Rapid7 InsightCloudSec getattr() method access
Vulnerability Description
An authenticated attacker can leverage an exposed getattr() method via a Jinja template to smuggle OS commands and perform other actions that are normally expected to be private methods. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec.
CVSS Information
N/A
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Vulnerability Title
InsightCloudSec 代码注入漏洞
Vulnerability Description
InsightCloudSec是InsightCloudSec公司的一个完全集成的云原生安全平台。 InsightCloudSec 23.3.21之前版本存在安全漏洞，该漏洞源于攻击者可以通过 Jinja 模板利用公开的 getattr() 方法执行 OS 命令。
CVSS Information
N/A
Vulnerability Type
N/A