漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
OPEXUS eComplaint unauthenticated file upload
Vulnerability Description
OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/DocumentUploadPub.aspx'. Users would see these unexpected files in cases. Uploading a large number of files could consume storage.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Vulnerability Type
通过用户控制密钥绕过授权机制
Vulnerability Title
OPEXUS eComplaint 安全漏洞
Vulnerability Description
OPEXUS eComplaint是美国OPEXUS公司的一个投诉与申诉管理平台。 OPEXUS eComplaint 10.1.0.0之前版本存在安全漏洞,该漏洞源于未经身份验证的攻击者可以上传任意文件,可能导致存储消耗。
CVSS Information
N/A
Vulnerability Type
N/A