漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
PRTG Network Monitor through 22.2.77.2204 does not prevent custom input for a device’s icon, which can be modified to insert arbitrary content into the style tag for that device. When the device page loads, the arbitrary Cascading Style Sheets (CSS) data is inserted into the style tag, loading malicious content. Due to PRTG Network Monitor preventing “characters, and from modern browsers disabling JavaScript support in style tags, this vulnerability could not be escalated into a Cross-Site Scripting vulnerability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Paessler PRTG Network Monitor 跨站脚本漏洞
Vulnerability Description
Paessler PRTG Network Monitor是德国Paessler公司的一款全功能网络监控管理软件。 PRTG Network Monitor 22.2.77.2204版本存在跨站脚本漏洞,该漏洞源于不会阻止设备图标的自定义输入,可以对其进行修改以将任意内容插入到该设备的样式标签中,当设备页面加载时,任意的CSS数据被插入到样式标签中,从而加载恶意内容。
CVSS Information
N/A
Vulnerability Type
N/A