Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Owasp Json-sanitizer 代码问题漏洞
Vulnerability Description
Owasp Json-sanitizer是Owasp基金会的一款基于Java可根据类似Json的文本内容生成Json格式数据的代码库。 OWASP json-sanitizer 1.2.2版本存在代码问题漏洞，该漏洞源于程序可能会为精心制作的输入发出关闭脚本标记和CDATA节分隔符。这允许攻击者可利用该漏洞将任意HTML或XML注入嵌入文档中。
CVSS Information
N/A
Vulnerability Type
N/A