Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A command injection vulnerability exists in TwistedWeb (version 14.0.0) due to improper input sanitization in the file upload functionality. An attacker can exploit this vulnerability by sending a specially crafted HTTP PUT request to upload a malicious file (e.g., a reverse shell script). Once uploaded, the attacker can trigger the execution of arbitrary commands on the target system, allowing for remote code execution. This could lead to escalation of privileges depending on the privileges of the web server process. The attack does not require physical access and can be conducted remotely, posing a significant risk to the confidentiality and integrity of the system.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TwistedWeb 安全漏洞
Vulnerability Description
TwistedWeb是Twisted开源的一个Web服务器框架。 TwistedWeb 14.0.0版本存在安全漏洞，该漏洞源于文件上传功能输入清理不当，可能导致远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A