Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME sniffing of chat traffic. NOTE: the vendor disputes the significance of this report, because the user must accept an interstitial warning before the HTML file content is rendered, and because the HTML content's origin is a sandbox domain
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Facebook Messenger和Facebook App for iOS 跨站脚本漏洞
Vulnerability Description
Facebook App和Facebook Messenger App for iOS都是美国Facebook公司的基于iOS平台的应用程序。Facebook App是一套应用程序中心，其作用是作为承载Facebook相关社交应用程序的枢纽；Facebook Messenger是一款桌面窗口聊天客户端。 基于iOS平台的Facebook应用程序14.0版本和Facebook Messenger应用程序10.0版本中存在跨站脚本漏洞，该漏洞源于程序在聊天监控时没有正确处理文件扩展名。远程攻击者可利用该漏洞注
CVSS Information
N/A
Vulnerability Type
N/A