| 제목 | a466350665 Smart-SSO <=2.1.1 Incomplete Denylist to Cross-Site Scripting |
|---|
| 설명 | ### Introduction
[Smart-SSO](https://github.com/a466350665) is a lightweight, high-availability Single Sign-On (SSO) authentication and authorization center built on **SpringBoot** and **OAuth2** protocol with **RBAC** (Role-Based Access Control) permission design.
Stored XSS vulnerabilities allow attackers to permanently store malicious scripts on the target server. When other users visit the affected page, the malicious script is executed.
### Affected Versions
Smart-SSO 2.1.1 and earlier |
|---|
| 원천 | ⚠️ https://www.notion.so/Smart-SSO-Stored-Cross-Site-Scripting-XSS-in-Role-Edit-Page-303ea92a3c4180f4beb9c119653ce51d |
|---|
| 사용자 | din4 (UID 50867) |
|---|
| 제출 | 2026. 02. 11. AM 02:24 (7 개월 ago) |
|---|
| 모더레이션 | 2026. 02. 22. AM 09:16 (11 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 347339 [a466350665 Smart-SSO 까지 2.1.1 Role Edit Page UserController.java save 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 17 |
|---|