Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Alist Contains a Reflected Cross-Site Scripting Vulnerability
Vulnerability Description
AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. The endpoint /i/:link_name takes in a user-provided value and reflects it back in the response. The endpoint returns an application/xml response, opening it up to HTML tags via XHTML and thus leading to a XSS vulnerability. This vulnerability is fixed in 3.29.0.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
AList 安全漏洞
Vulnerability Description
AList是中国Xhofe个人开发者的一个支持多存储的文件列表程序。 AList 3.29.0之前版本存在安全漏洞，该漏洞源于存在反射型跨站脚本漏洞。
CVSS Information
N/A
Vulnerability Type
N/A