漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Missing Server-Side Input Validation in HTTP Parameter
Vulnerability Description
In Progress MOVEit Transfer versions released before 2022.0.10 (14.0.10), 2022.1.11 (14.1.11), 2023.0.8 (15.0.8), 2023.1.3 (15.1.3), an input validation issue was discovered. An authenticated user can manipulate a parameter in an HTTPS transaction. The modified transaction could lead to computational errors within MOVEit Transfer and potentially result in a denial of service.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Vulnerability Type
输入验证不恰当
Vulnerability Title
Progress MOVEit Transfer 输入验证错误漏洞
Vulnerability Description
Progress MOVEit Transfer是Progress公司的一款安全的托管文件传输应用程序。 Progress MOVEit Transfer存在输入验证错误漏洞,该漏洞源于存在输入验证问题,经过身份验证的用户可以操作HTTPS事务中的参数导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A