Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
tianti 跨站请求伪造漏洞
Vulnerability Description
tianti（天梯）是jeffry个人开发者的一个 JAVA 轻量级的 CMS 解决方案。 tianti v2.3版本存在安全漏洞，该漏洞源于/user/ajax/save组件中存在跨站请求伪造漏洞，可能导致执行任意操作。
CVSS Information
N/A
Vulnerability Type
N/A