| Название | forest forest <= 0.0.5 Improper Neutralization of Alternate XSS Syntax |
|---|
| Описание | Forest <= 0.0.5 contains a stored XSS vulnerability in the user profile update functionality. The signature fields are not sanitized before storage, allowing authenticated attackers to inject malicious JavaScript code that executes when other users view the attacker's profile. |
|---|
| Источник | ⚠️ https://fx4tqqfvdw4.feishu.cn/docx/MBymdGpuFoGQYuxEiH2cdC5BnSe?from=from_copylink |
|---|
| Пользователь | xcxr (UID 86629) |
|---|
| Представление | 10.02.2026 04:37 (8 месяцы назад) |
|---|
| Модерация | 21.02.2026 18:42 (12 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 347317 [rymcu forest до 0.0.5 User Profile UserInfoController.java updateUserInfo межсайтовый скриптинг] |
|---|
| Баллы | 18 |
|---|