Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
TopQuadrant TopBraid EDG JavaScript console XXE
Vulnerability Description
TopQuadrant TopBraid EDG before version 8.0.1 allows an authenticated attacker to upload an XML DTD file and execute JavaScript to read local files or access URLs (XXE). Fixed in 8.0.1 (bug fix: TBS-6721).
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Vulnerability Type
XML外部实体引用的不恰当限制(XXE)
Vulnerability Title
TopQuadrant TopBraid EDG 安全漏洞
Vulnerability Description
TopQuadrant TopBraid EDG是TopQuadrant公司的一个知识图谱创建和管理工具。 TopQuadrant TopBraid EDG 8.0.1之前版本存在安全漏洞，该漏洞源于允许经过身份验证的攻击者上传XML DTD文件并执行JavaScript以读取本地文件或访问URL。
CVSS Information
N/A
Vulnerability Type
N/A