漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Dovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF). The affected endpoint processes state-changing requests without requiring a CSRF token or equivalent protection. The endpoint accepts application/x-www-form-urlencoded requests, and an originally POST-based request can be converted to a GET request while still successfully updating user details. This allows an attacker to craft a malicious request that, when visited by an authenticated user, can modify user account information without their consent.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Infoopia Dovestones AD Self Update 安全漏洞
Vulnerability Description
Infoopia Dovestones AD Self Update是加拿大Infoopia公司的一款企业目录信息自助更新工具。 Infoopia Dovestones AD Self Update 4.0.0.5之前版本存在安全漏洞，该漏洞源于端点缺少CSRF令牌保护，可能导致攻击者通过恶意请求修改认证用户的账户信息。
CVSS Information
N/A
Vulnerability Type
N/A