Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Docmosis Tornado prior to version 2.9.5. An unauthenticated attacker can bypass the authentication check filter completely by introducing a specially crafted request with relative path segments.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tornado 授权问题漏洞
Vulnerability Description
Tornado是中国龙卷风科技（Tornado）社区的一个Python Web框架和异步网络库。该库通过使用非阻塞网络I / O，可以扩展到成千上万的开放连接，使其非常适合 长时间轮询， WebSocket和其他需要与每个用户建立长期连接的应用程序。 Docmosis Tornado 2.9.5之前版本存在安全漏洞，该漏洞源于未经身份验证的攻击者可以通过引入带有相对路径段的特制请求来完全绕过身份验证检查过滤器。
CVSS Information
N/A
Vulnerability Type
N/A