漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Unrestricted uploading of dangerous file types to AvePoint products
Vulnerability Description
Unrestricted file upload vulnerability in DocAve 6.13.2, Perimeter 1.12.3, Compliance Guardian 4.7.1, and earlier versions, allowing administrator users to upload files without proper validation. An attacker could exploit this vulnerability by uploading malicious files that compromise the system. In addition, it is vulnerable to Path Traversal, which allows files to be written to arbitrary directories within the web root.
CVSS Information
N/A
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
Avepoint多款产品 代码问题漏洞
Vulnerability Description
AvePoint DocAve等都是美国AvePoint公司的产品。AvePoint DocAve是一个文档管理平台。AvePoint Perimeter是一个文档分享平台。AvePoint Compliance Guardian是一个数据治理平台。 Avepoint多款产品存在代码问题漏洞，该漏洞源于未正确验证文件上传，可能导致上传恶意文件并危害系统。此外，还存在路径遍历漏洞，可能导致文件被写入Web根目录中的任意目录。以下产品和版本受到影响：DocAve 6.13.2版本、Perimeter 1.12
CVSS Information
N/A
Vulnerability Type
N/A