漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
React Router allows pre-render data spoofing on React-Router framework mode
Vulnerability Description
React Router is a router for React. In versions on the 7.0 branch prior to version 7.5.2, it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values of the data object passed to the HTML. This issue has been patched in version 7.5.2.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Vulnerability Type
对数据真实性的验证不充分
Vulnerability Title
react-router 数据伪造问题漏洞
Vulnerability Description
react-router是Remix开源的一个 React 的声明式路由。 react-router 7.5.2之前版本存在数据伪造问题漏洞,该漏洞源于通过添加请求标头可能修改预渲染数据。
CVSS Information
N/A
Vulnerability Type
N/A