漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
Attackers with access to the "documentconverterws" API were able to inject serialized Java objects, that were not properly checked during deserialization. Access to this API endpoint is restricted to local networks by default. Arbitrary code could be injected that is being executed when processing the request. A check has been introduced to restrict processing of legal and expected classes for this API. We now log a warning in case there are attempts to inject illegal classes. No publicly available exploits are known.
漏洞信息
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
漏洞
对生成代码的控制不恰当(代码注入)
漏洞
Open-Xchange AppSuite 代码问题漏洞
漏洞信息
Open-Xchange AppSuite是德国Open-Xchange公司的一套Web云桌面环境。该环境允许用户更直观的管理电子邮件、任务和文件等。 Open-Xchange App Suite存在代码问题漏洞，该漏洞源于能够注入序列化的Java对象，攻击者利用该漏洞可以执行任意代码。
漏洞信息
N/A
漏洞
N/A