Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the file browser in Guacamole 0.9.8 and 0.9.9, when file transfer is enabled to a location shared by multiple users, allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename. NOTE: this vulnerability was fixed in guacamole.war on 2016-01-13, but the version number was not changed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Guacamole 跨站脚本漏洞
Vulnerability Description
Apache Guacamole是美国阿帕奇（Apache）软件基金会的一款无客户端远程桌面网关，它支持标准协议，如VNC，RDP和SSH等。 Apache Guacamole 0.9.8版本和0.9.9版本中的文件浏览器存在跨站脚本漏洞。远程攻击者可借助特制的文件名利用该漏洞注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A