Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as (1) system-property, (2) sys:getProperty, and (3) run:exec.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Google搜索工具信息泄漏及任意代码执行漏洞
Vulnerability Description
Google搜索工具是一款大型的企业级硬件搜索工具。 Google Mini 搜索工具(可能也包括Google 搜索工具)中的Saxon XSLT解析器，允许远程攻击者通过危险的XSLT类型表格的标签值属性中的java类方式，诸如 (1) system-property， (2) sys:getProperty， 和 (3) run:exec，来获得敏感信息和执行任意的代码。
CVSS Information
N/A
Vulnerability Type
N/A