Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Part-DB Persistent Denial of Service via Uncaught Exception from Misleading File Extension in Avatar Upload
Vulnerability Description
Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user can upload a profile picture with a misleading file extension (e.g., .jpg.txt), resulting in a persistent 500 Internal Server Error when attempting to view or edit that user’s profile. This makes the profile permanently inaccessible via the UI for both users and administrators, constituting a Denial of Service (DoS) within the user management interface. This issue has been patched in version 1.17.3.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Vulnerability Type
未捕获的异常
Vulnerability Title
Part-DB 安全漏洞
Vulnerability Description
Part-DB是Part-DB开源的一个基于 Web 的数据库，用于管理电子元件。 Part-DB 1.17.3之前版本存在安全漏洞，该漏洞源于认证用户可上传误导性扩展名的文件，可能导致用户管理界面拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A