Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the URLDecoder function in JRE before 1.8, as used in Apache Struts 2.x before 2.3.28, when using a single byte page encoding, allows remote attackers to inject arbitrary web script or HTML via multi-byte characters in a url-encoded parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Struts Oracle JRE 跨站脚本漏洞
Vulnerability Description
Apache Struts是美国阿帕奇（Apache）软件基金会负责维护的一个开源项目，是一套用于创建企业级Java Web应用的开源MVC框架，主要提供两个版本框架产品，Struts 1和Struts 2。Oracle JRE（Java Runtime Environment）是美国甲骨文（Oracle）公司的一套运行Java应用程序的环境。 Apache Struts 2.3.28之前2.x版本中使用的Oracle JRE 1.8之前版本中的‘URLDecoder’函数存在跨站脚本漏洞。当程序使用单字
CVSS Information
N/A
Vulnerability Type
N/A