漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the attacker.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Proself 代码问题漏洞
Vulnerability Description
Proself是Proself公司的一款应用软件。 部分Proself产品存在安全漏洞。攻击者利用该漏洞执行XML外部实体 (XXE) 攻击,从而可以读取服务器上包含帐户信息的任意文件。以下产品及版本受到影响:Proself Enterprise/Standard Edition 5.62版本及之前版本、Proself Gateway Edition 1.65版本及之前版本、Proself Mail Sanitize Edition 1.08版本及之前版本。
CVSS Information
N/A
Vulnerability Type
N/A