提交 #615731: mall <=1.0.3 DOM XSS信息

标题mall <=1.0.3 DOM XSS
描述Due to improper access control settings for Swagger-related interfaces, attackers are allowed to access internal API documentation, and one of the interfaces exists a DOM XSS vulnerability.
来源⚠️ https://github.com/zast-ai/vulnerability-reports/blob/main/mall/DOM_XSS.md
用户
 ZAST.AI (UID 87884)
提交2025-07-14 11時51分 (1 年前)
管理2025-07-25 10時54分 (11 days later)
状态已接受
VulDB条目317604 [macrozheng mall 直到 1.0.3 Swagger UI /swagger-ui/index.html configUrl 跨网站脚本]
积分15

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!