Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OpenGrok 1.14.1 has a reflected Cross-Site Scripting (XSS) issue when producing the cross reference page. This happens through improper handling of the revision parameter. The application reflects unsanitized user input into the HTML output.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Vulnerability Type
N/A
Vulnerability Title
Oracle OpenGrok 安全漏洞
Vulnerability Description
Oracle OpenGrok是美国甲骨文(Oracle)公司的一个快速高效的源代码搜索与交叉引用工具,支持多种编程语言,用于大型代码库的导航和分析。 Oracle OpenGrok 1.14.1版本存在安全漏洞,该漏洞源于对revision参数处理不当,可能导致反射型跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A