Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cross-Site Request Forgery on NXLog Manager
Vulnerability Description
Cross-Site Request Forgery (CSRF) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to eliminate roles within the platform by sending a specifically crafted query to the server. The vulnerability is based on the absence of proper validation of the origin of incoming requests.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Vulnerability Type
跨站请求伪造(CSRF)
Vulnerability Title
Nxlog 跨站请求伪造漏洞
Vulnerability Description
Nxlog是美国Nxlog公司的一个可支持多种操作系统用于日志收集、日志集中化的软件。 NXLog Manager 5.6.5633 版本存在跨站请求伪造漏洞，该漏洞源于缺乏对传入请求来源的正确验证，允许攻击者通过向服务器发送特制查询来删除平台内的角色。
CVSS Information
N/A
Vulnerability Type
N/A