Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ESAFENET DSM examExportPDF command injection
Vulnerability Description
A vulnerability has been found in ESAFENET DSM 3.1.2 and classified as critical. Affected by this vulnerability is the function examExportPDF of the file /admin/plan/examExportPDF. The manipulation of the argument s leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Vulnerability Title
EsafeNet DSM 安全漏洞
Vulnerability Description
EsafeNet DSM是中国亿赛通（EsafeNet）公司的一款提供细粒度文档使用权限控制的系统。用于文档权限控制、数据安全保护和授权管理。 EsafeNet DSM 3.1.2版本存在安全漏洞，该漏洞源于examExportPDF文件中的命令注入。
CVSS Information
N/A
Vulnerability Type
N/A