| Titel | JeeSite https://github.com/thinkgem/jeesite5 <=5.12.0 Cross Site Scripting |
|---|
| Beschreibung | By exploiting the whitelist of XSS filters, XSS defenses can be bypassed, unlocking dozens of high-risk XSS vulnerabilities, including both reflected and stored types.
|
|---|
| Quelle | ⚠️ https://github.com/thinkgem/jeesite5/issues/32 |
|---|
| Benutzer | ZAST.AI (UID 87884) |
|---|
| Einreichung | 18.07.2025 05:47 (vor 1 Jahr) |
|---|
| Moderieren | 19.07.2025 06:17 (1 day later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 316978 [thinkgem JeeSite bis 5.12.0 XSS Filter EncodeUtils.java xssFilter text Cross Site Scripting] |
|---|
| Punkte | 15 |
|---|