authenticated reflected XSS vulnerability in Sync Breeze Enterprise Server

Disk Pulse Enterprise v10.4.18 has an authenticated reflected XSS vulnerability in the '/monitor_directory?sid=' endpoint, caused by insufficient validation of the 'monitor_directory' parameter sent by POST. An attacker could exploit this weakness to send malicious content to an authenticated user and steal information from their session.

N/A

跨站请求伪造(CSRF)

Flexense Disk Pulse Enterprise 跨站请求伪造漏洞

Flexense Disk Pulse Enterprise是Flexense公司的一个实时文件系统监控软件。 Flexense Disk Pulse Enterprise 10.4.18版本存在跨站请求伪造漏洞，该漏洞源于对monitor_directory端点中monitor_directory参数的用户输入验证不足，可能导致反射型跨站脚本攻击。

N/A

N/A