Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Information Disclosure Vulnerability
Vulnerability Description
This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Preference module of the application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which could lead to unauthorized access and modification of sensitive information belonging to other users.
CVSS Information
N/A
Vulnerability Type
授权机制不正确
Vulnerability Title
Symphony XTS Web Trader 安全漏洞
Vulnerability Description
Symphony XTS Web Trader是Symphony公司的一个基于 HTML5 的高级交易平台。 Symphony XTS Web Trader 2.0.0.1_P160版本存在安全漏洞，该漏洞源于对API的访问控制不当。远程攻击者利用该漏洞可以通过HTTP请求操纵参数导致未经授权的访问和修改其他用户的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A