Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue in Eramba Limited Eramba Enterprise and Community edition v.3.19.1 allows a remote attacker to execute arbitrary code via the path parameter in the URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Eramba 代码注入漏洞
Vulnerability Description
Eramba是英国Eramba公司的一款开源的企业级IT治理应用程序。该程序具有IT安全、合规性审计分析等功能。 Eramba 3.19.1版本存在代码注入漏洞，该漏洞源于Eramba Web 应用程序允许经过身份验证的用户的代码执行，攻击者利用该漏洞可以修改 URL 中的参数path，在应用程序运行的用户帐户上下文中执行命令。
CVSS Information
N/A
Vulnerability Type
N/A