Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input, aka "AntiXSS Library Bypass Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft AntiXSS Library Sanitization模块安全限制绕过漏洞
Vulnerability Description
AntiXSS是微软提供的.net平台下的用过防止xss等脚本攻击的机制，提供了无数的编码函数用于处理用户的输入。使用白名单机制。 Microsoft Anti-Cross Site Scripting (AntiXSS) Library在实现上存在影响过滤模块的安全限制绕过漏洞。在解析转义的CSS内容时，过滤模块中的错误可被利用执行XSS攻击。
CVSS Information
N/A
Vulnerability Type
N/A