Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A path traversal vulnerability in Vedo Suite 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting an unsanitized 'file_get_contents()' function call in '/api_vedo/template'.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bottinelli Informatical Vedo Suite 安全漏洞
Vulnerability Description
Bottinelli Informatical Vedo Suite是意大利Bottinelli Informatica公司的一款面向纺织与设计行业的企业软件套件。 Bottinelli Informatical Vedo Suite 2024.17版本存在安全漏洞,该漏洞源于未清理的file_get_contents函数调用可能导致路径遍历攻击。
CVSS Information
N/A
Vulnerability Type
N/A