Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Side Template Injection (SSTI) with a crafted template file. The attacker must have template manager permission.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IUCLID 安全漏洞
Vulnerability Description
IUCLID是欧洲化学品管理局（European Chemicals Agency）组织的一个软件应用程序。用于捕获，存储，维护和交换有关化学物质的内在特性和危险特性的数据。 IUCLID 6.27.6之前版本存在安全漏洞，该漏洞源于允许经过身份验证的远程用户使用精心制作的模板文件通过服务器端模板注入(SSTI)执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A