Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
b3log Symphony 跨站脚本漏洞
Vulnerability Description
b3log Symphony（又名Sym）是一套开源的使用Java语言编写的现代社区平台，包括论坛、BBS、SNS和博客等。 b3log Symphony 2.2.0版本中存在跨站脚本漏洞。远程攻击者可通过发送带有/article URI的私人信件，然后在发送带有已更改标题的私人信件利用该漏洞获取用户cookie。
CVSS Information
N/A
Vulnerability Type
N/A