Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Weaver e-cology API RequestInfoByXml xml external entity reference
Vulnerability Description
A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
XML外部实体引用的不恰当限制(XXE)
Vulnerability Title
Weaver e-cology 代码问题漏洞
Vulnerability Description
Weaver e-cology是中国泛微科技（Weaver）公司的一套协同管理应用平台。 Weaver e-cology 9.0之前版本存在代码问题漏洞，该漏洞源于组件API中的函数RequestInfoByXml存在安全问题，导致 xml 外部实体引用。
CVSS Information
N/A
Vulnerability Type
N/A