Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Snipe-IT 安全漏洞
Vulnerability Description
Snipe-IT是Grokability开源的一套开源IT资产/许可证管理系统。 Snipe-IT 8.3.3之前版本存在安全漏洞,该漏洞源于允许经过身份验证的攻击者上传包含任意文件的恶意备份文件并执行系统命令,可能导致远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A