Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Docmosis Tornado <= 2.9.4 is vulnerable to Directory Traversal leading to the disclosure of arbitrary content on the file system.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tornado 路径遍历漏洞
Vulnerability Description
Tornado是中国龙卷风科技（Tornado）社区的一个Python Web框架和异步网络库。该库通过使用非阻塞网络I / O，可以扩展到成千上万的开放连接，使其非常适合 长时间轮询， WebSocket和其他需要与每个用户建立长期连接的应用程序。 Docmosis Tornado 2.9.5之前版本存在安全漏洞，该漏洞源于存在目录遍历漏洞，攻击者利用该漏洞可以导致文件系统上任意内容的泄露。
CVSS Information
N/A
Vulnerability Type
N/A