Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export lab files. This interface lacks effective input validation and filtering when processing file path parameters submitted by users.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EVE-NG 安全漏洞
Vulnerability Description
EVE-NG是EVE-NG公司的一款无客户端多供应商网络仿真软件。 EVE-NG 6.4.0-13-PRO版本存在安全漏洞,该漏洞源于/api/export接口中目录遍历,可能导致任意文件导出。
CVSS Information
N/A
Vulnerability Type
N/A