| 标题 | forest forest <= 0.0.5 Improper Neutralization of Alternate XSS Syntax |
|---|
| 描述 | Forest <= 0.0.5 contains a stored XSS vulnerability in the user profile update functionality. The signature fields are not sanitized before storage, allowing authenticated attackers to inject malicious JavaScript code that executes when other users view the attacker's profile. |
|---|
| 来源 | ⚠️ https://fx4tqqfvdw4.feishu.cn/docx/MBymdGpuFoGQYuxEiH2cdC5BnSe?from=from_copylink |
|---|
| 用户 | xcxr (UID 86629) |
|---|
| 提交 | 2026-02-10 04時37分 (8 月前) |
|---|
| 管理 | 2026-02-21 18時42分 (12 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 347317 [rymcu forest 直到 0.0.5 User Profile UserInfoController.java updateUserInfo 跨网站脚本] |
|---|
| 积分 | 18 |
|---|