Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HotCRP vulnerable to exposure of submitted documents
Vulnerability Description
HotCRP is conference review software. Starting in commit aa20ef288828b04550950cf67c831af8a525f508 and prior to commit ceacd5f1476458792c44c6a993670f02c984b4a0, authors with at least one submission on a HotCRP site could use the document API to download any documents (PDFs, attachments) associated with any submission. The problem was patched in commit ceacd5f1476458792c44c6a993670f02c984b4a0.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
通过发送数据的信息暴露
Vulnerability Title
HotCRP Conference Review Software 安全漏洞
Vulnerability Description
HotCRP Conference Review Software是Eddie Kohler个人开发者的一个软件。用于管理评审过程，尤其是学术会议。 HotCRP Conference Review Software存在安全漏洞，该漏洞源于文档API存在缺陷，可能导致至少提交过一次论文的作者下载与任何提交相关的任何文档。
CVSS Information
N/A
Vulnerability Type
N/A