Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
An unrestricted file upload vulnerability affects HCL Compass
Vulnerability Description
HCL Compass is vulnerable to lack of file upload security. An attacker could upload files containing active code that can be executed by the server or by a user's web browser.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Vulnerability Type
N/A
Vulnerability Title
HCL Technologies Compass 代码问题漏洞
Vulnerability Description
HCL Technologies Compass是美国HCL Technologies公司的一个低代码变更管理软件。管理全方位的测试活动以及与开发人员工具的集成。 HCL Technologies Compass 存在安全漏洞，该漏洞源于存在文件上传漏洞。攻击者可利用该漏洞上传包含活动代码的文件，并由服务器或用户的web浏览器执行。受影响的产品和版本：HCL Compass 2.0版本，2.1版本，2.2版本。
CVSS Information
N/A
Vulnerability Type
N/A