XWiki Platform 访问控制错误漏洞

XWiki Platform is the XWiki open source suite of Wiki platforms for creating web collaboration applications. An access control error vulnerability exists in XWiki Platform versions 16.7.0 through 16.10.11, 17.4.4, and 17.7.0, which stems from an XJetty package exposure context that could lead to...

CVE-2021-35962

Specific page parameters in Dr. ID Door Access Control and Personnel Attendance Management system does not filter special characters. Remote attackers can apply Path Traversal means to download credential files from the system without permission...