Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Struts错误响应跨站脚本漏洞
Vulnerability Description
Apache Struts是美国阿帕奇（Apache）软件基金会负责维护的一个开源项目，是一套用于创建企业级Java Web应用的开源MVC框架，主要提供两个版本框架产品，Struts 1和Struts 2。 Struts对用户提交的URL处理上存在几个安全问题，攻击者可能利用这些漏洞对客户端进行攻击。 在试图访问不存在的Struts操作URL时，struts基础架构生成错误响应请求操作的路径。生成这种错误的机制没有执行充分的输入验证，也没有执行输出的HTML编码，导致系统在某些环境中受跨站脚本攻击影响。
CVSS Information
N/A
Vulnerability Type
N/A