Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A cross-site scripting (XSS) vulnerability in MQTTRoute v3.3 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the dashboard name text field.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MQTT 跨站脚本漏洞
Vulnerability Description
MQTT（Message Queuing Telemetry Transport,消息队列遥测传输）是一个ISO 标准（ISO/IEC PRF 20922）下基于发布 (Publish)/订阅 (Subscribe)范式的消息协议，它工作在TCP/IP协议族上，是为硬件性能低下的远程设备以及网络状况不好的情况下而设计的发布/订阅型消息协议。 MQTT MQTTRoute v3.3及之前版本存在安全漏洞，攻击者利用该漏洞可以通过注入仪表板名称文本字段的精心设计的有效负载执行任意 Web 脚本或 HTML 。
CVSS Information
N/A
Vulnerability Type
N/A