Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OS Command Injection vulnerability affecting SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x
Vulnerability Description
An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. A specially crafted HTTP request can lead to arbitrary command execution.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Dassault Systèmes 3DEXPERIENCE 操作系统命令注入漏洞
Vulnerability Description
Dassault Systèmes 3DEXPERIENCE是法国达索系统（Dassault Systèmes）公司的一种业务与创新平台。 Dassault Systèmes 3DEXPERIENCE R2021x 到 3DEXPERIENCE R2023x版本存在操作系统命令注入漏洞，该漏洞源于特制的 HTTP 请求可能导致任意命令执行。
CVSS Information
N/A
Vulnerability Type
N/A