Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Asseco SEE Live 安全漏洞
Vulnerability Description
Asseco SEE Live是波兰Asseco公司的一个金融服务平台的实时客户互动与通知管理系统。 Asseco SEE Live 2.0版本存在安全漏洞，该漏洞源于Contact Plan、E-Mail、SMS和Fax组件存在本地文件包含，可能导致远程经过身份验证的用户通过downloadAttachment和downloadAttachmentFromPath API调用中的path参数访问主机上的文件。
CVSS Information
N/A
Vulnerability Type
N/A