Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)
Vulnerability Description
Adobe Connect versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute malicious scripts in a victim's browser. Exploitation of this issue requires user interaction in that a victim must navigate to a crafted web page. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. Scope is changed.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Adobe Connect 跨站脚本漏洞
Vulnerability Description
Adobe Connect是美国奥多比（Adobe）公司的一个用于创建会议环境的软件。 Adobe Connect 12.9及之前版本存在跨站脚本漏洞，该漏洞源于DOM型跨站脚本漏洞，可能导致攻击者在受害者浏览器中执行恶意脚本。
CVSS Information
N/A
Vulnerability Type
N/A