Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Bonsai多个跨站脚本执行漏洞
Vulnerability Description
Mozilla Bonsai是一款允许用户查询CVS档案内容的工具，可以获得登记列表，登记日志等信息。 Mozilla Bonsai多个脚本对用户提交的URL数据缺少过滤，远程攻击者可以利用这个漏洞进行跨站脚本执行攻击。 Mozilla Bonsai包含的多个脚本对HTML，JAVASCRIPT代码缺少过滤，远程攻击者可以构建包含恶意代码的URL链接的页面，当诱使目标用户点击后，其中的恶意脚本代码就可以在用户浏览器上执行，导致用户基于认证的Cookie等信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A