CNNVD-202601-750 Information
CNNVD ID
CNNVD-202601-750
Related CVE
- CNNVD Published: 2026-01-02
Description (Chinese)
LigeroSmart是LigeroSmart开源的一个管理平台。 LigeroSmart 6.1.24及之前版本存在代码注入漏洞，该漏洞源于对组件Environment Variable Handler中参数REQUEST_URI的错误操作，可能导致跨站脚本攻击。
Description (English)
LigeroSmart is a management platform for the LigeroSmart open source. LigeroSmart 6.1.24 et seq. contains a code-injection loophole, which results from an error in the parameter REQUEST URI in component Environment Variable Handler, which may result in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
LigeroSmart
Published
2026-01-02
Last Modified
2026-02-24
References
https://github.com/LigeroSmart/ligerosmart/releases/tag/6.1.26 https://vuldb.com/?ctiid.339364 https://vuldb.com/?id.339364 https://vuldb.com/?submit.729021 https://github.com/LigeroSmart/ligerosmart/commit/264ac5b2be5b3c673ebd8cb862e673f5d300d9a7 https://github.com/LigeroSmart/ligerosmart/issues/278 https://github.com/LigeroSmart/ligerosmart/issues/278#issuecomment-3675129508 https://access.redhat.com/security/cve/cve-2025-15437
Share on: