Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly formatted file, the content may be reflected in the HTML response, allowing the attacker to execute malicious scripts or exfiltrate data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GestioIP 安全漏洞
Vulnerability Description
GestioIP是GestioIP公司的一款基于 Web 的 IPv4/IPv6 地址管理软件。 GestioIP v3.5.7版本存在安全漏洞,该漏洞源于容易受到反射型跨站脚本攻击(XSS),导致攻击者执行恶意脚本或数据泄露。
CVSS Information
N/A
Vulnerability Type
N/A