漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
rmountjoy92 DashMachine Config save_config code injection
Vulnerability Description
A vulnerability classified as problematic was found in rmountjoy92 DashMachine 0.5-4. Affected by this vulnerability is an unknown functionality of the file /settings/save_config of the component Config Handler. The manipulation of the argument value_template leads to code injection. The exploit has been disclosed to the public and may be used. The identifier VDB-248257 was assigned to this vulnerability.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Vulnerability Title
DashMachine 代码注入漏洞
Vulnerability Description
DashMachine是Ross Mountjoy个人开发者的一个网络应用程序书签仪表板。 DashMachine 0.5-4版本存在代码注入漏洞,该漏洞源文件/settings/save_config的参数value_template会导致代码注入。
CVSS Information
N/A
Vulnerability Type
N/A