Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Novell Data Synchronizer Mobility Pack跨站脚本攻击漏洞
Vulnerability Description
Novell Data Synchronizer Mobility Pack是即时同步应用程序和移动设备数据的应用。 Novell Data Synchronizer 1.x至1.1.2 build 428版本的Mobility Pack 1.2之前版本中存在跨站脚本攻击漏洞。通过Cookie值传递的某些输入（没有设置“HTTPOnly”旗标时）在返回给用户之前没有正确过滤。远程攻击者可利用该漏洞在受影响站点的用户浏览器会话中执行任意HTML和脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A