Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability on Google Search Appliance (GSA) devices before 7.0.14.G.216 and 7.2 before 7.2.0.G.114, when dynamic navigation is configured, allows remote attackers to inject arbitrary web script or HTML via input included in a SCRIPT element.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Google Search Appliance 跨站脚本漏洞
Vulnerability Description
Google Search Appliance（GSA，搜索服务器）是美国谷歌（Google）公司推出的一种机架式设备。该设备提供文件索引功能，使用类似谷歌搜索的界面提供给终端用户检索，并能够集成到企业内部、文件管理系统或网站中。 Google GSA设备7.0.14及之前的版本和7.2.0及之前的版本中存在跨站脚本漏洞。当配置动态导航时，远程攻击者可利用该漏洞注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A