42 matches found
Nitro 输入验证错误漏洞
Nitro is an open-source, zero-configurable production-level server extension tool developed by Nitro. Versions prior to Nitro 3.0.260429-beta contained a vulnerability related to input validation errors. This vulnerability allowed attackers to convert wildcarded redirect rules into cross-host...
6.1CVSS5.8AI score0.0028EPSS
SaveExploits0References1
Nitro 路径遍历漏洞
Nitro is an open-source, zero-configurable production-level server extension tool developed by Nitro. Versions prior to Nitro 3.0.260429-beta contained a path traversal vulnerability. This vulnerability allowed attackers to send percent-encoded paths in URLs, causing Nitro to redirect requests to...
5.3CVSS5.8AI score0.00392EPSS
SaveExploits0References1
20