Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OMERO.web displays unecessary user information when requesting to reset the password
Vulnerability Description
OMERO.web provides a web based client and plugin infrastructure. Prior to version 5.29.2, if an error occurred when resetting a user's password using the Forgot Password option in OMERO.web, the error message displayed on the Web page can disclose information about the user. This issue has been patched in version 5.29.2. A workaround involves disabling the Forgot password option in OMERO.web using the omero.web.show_forgot_password configuration property.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
通过错误消息导致的信息暴露
Vulnerability Title
OMERO.web 安全漏洞
Vulnerability Description
OMERO.web是Open Microscopy Environment团队的一款用于从Web浏览器查看OMERO服务器上图像的客户端程序。 OMERO.web 5.29.2之前版本存在安全漏洞，该漏洞源于重置密码时错误消息泄露用户信息。
CVSS Information
N/A
Vulnerability Type
N/A