Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible to remotely execute code in the Cobalt Strike UI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Fortra Cobalt Strike 跨站脚本漏洞
Vulnerability Description
Fortra Cobalt Strike是Fortra公司的一个应用程序。为您提供了一个开发后代理和秘密渠道，以模仿客户网络中一个安静的长期嵌入式参与者。 Fortra Cobalt Strike 4.7.1版本存在安全漏洞，该漏洞源于Swing 组件上无法正确转义 HTML 标签，攻击者利用该漏洞可以通过注入精心制作的 HTML 代码，在 Cobalt Strike UI 中执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A