Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in RouterNanoHTTPD.java in NanoHTTPD through 2.3.1. The GeneralHandler class implements a basic GET handler that prints debug information as an HTML page. Any web server that extends this class without implementing its own GET handler is vulnerable to reflected XSS, because the GeneralHandler GET handler prints user input passed through the query string without any sanitization.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NanoHTTPD 跨站脚本漏洞
Vulnerability Description
LordFokas NanoHTTPD 是GlobalLordFokas个人开发者的一个应用软件。提供轻量级的HTTP服务器，专为嵌入其他应用程序而设计 NanoHTTPD through 2.3.1 存在跨站脚本漏洞，该漏洞源于GeneralHandler GET处理程序打印通过查询字符串传递的用户输入，而不进行任何清理处理。
CVSS Information
N/A
Vulnerability Type
N/A