漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Clavister E10/E80 Setting cross-site request forgery
Vulnerability Description
A vulnerability was found in Clavister E10 and E80 up to 14.00.10 and classified as problematic. This issue affects some unknown processing of the component Setting Handler. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 14.00.11 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-258917 was assigned to this vulnerability.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Vulnerability Type
跨站请求伪造(CSRF)
Vulnerability Title
Clavister E10 跨站请求伪造漏洞
Vulnerability Description
Clavister E10是瑞典Clavister公司的一款防火墙。 Clavister E10、E80 20240323版本及之前版本存在跨站请求伪造漏洞。攻击者利用该漏洞执行跨站点请求伪造攻击。
CVSS Information
N/A
Vulnerability Type
N/A