| Título | mall <=1.0.3 DOM XSS |
|---|
| Descripción | Due to improper access control settings for Swagger-related interfaces, attackers are allowed to access internal API documentation, and one of the interfaces exists a DOM XSS vulnerability. |
|---|
| Fuente | ⚠️ https://github.com/zast-ai/vulnerability-reports/blob/main/mall/DOM_XSS.md |
|---|
| Usuario | ZAST.AI (UID 87884) |
|---|
| Sumisión | 2025-07-14 11:51 (hace 11 meses) |
|---|
| Moderación | 2025-07-25 10:54 (11 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 317604 [macrozheng mall hasta 1.0.3 Swagger UI /swagger-ui/index.html configUrl secuencias de comandos en sitios cruzados] |
|---|
| Puntos | 15 |
|---|