漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
EspoCRM is vulnerable to access denial through double slash in URI corrupting router cache
Vulnerability Description
EspoCRM is a web application with a frontend designed as a single-page application and a REST API backend written in PHP. In versions 9.1.6 and below, if a user loads Espo in the browser with double slashes (e.g https://domain//#Admin) and the webserver does not strip the double slash, it can cause a corrupted Slim router's cache. This will make the instance unusable until there is a completed rebuild. This is fixed in version 9.1.7.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
Vulnerability Type
HTTP请求的解释不一致性(HTTP请求私运)
Vulnerability Title
EspoCRM 环境问题漏洞
Vulnerability Description
EspoCRM是EspoCRM开源的一套开源的基于Web的客户关系管理系统（CRM）。该系统提供销售自动化、社区和客户支持等功能。 EspoCRM 9.1.6及之前版本存在环境问题漏洞，该漏洞源于双斜杠导致Slim路由器缓存损坏，可能导致实例不可用。
CVSS Information
N/A
Vulnerability Type
N/A