| 제목 | ruifang-tech Rebuild 3.8.6 Stored Cross Site Scripting |
|---|
| 설명 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Rebuild 3.8.6, within the project task description input functionality. Attackers can exploit this vulnerability by injecting malicious JavaScript or HTML payloads into task descriptions. The payload is executed whenever any project group members view an affected task. |
|---|
| 원천 | ⚠️ https://github.com/cydtseng/Vulnerability-Research/blob/main/rebuild/StoredXSS-TaskDescription.md |
|---|
| 사용자 | vastzero (UID 78767) |
|---|
| 제출 | 2024. 12. 17. PM 02:53 (2 연령 ago) |
|---|
| 모더레이션 | 2024. 12. 27. PM 08:31 (10 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 289629 [ruifang-tech Rebuild 3.8.6 Project Tasks Section tasks 설명 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 18 |
|---|