Junos Space Security Director: Persistent Cross-Site Scripting (XSS) vulnerability

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Junos Space Security Director allows an attacker to inject malicious scripts into the application, which are then stored and executed in the context of other users' browsers when they access affected pages.This issue affects Juniper Security Director:  * All versions before 24.1R4.

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

Juniper Networks Junos Space Security Director 跨站脚本漏洞

Juniper Networks Junos Space Security Director是美国瞻博网络（Juniper Networks）公司的一款用于管理Junos Space解决方案的应用程序。 Juniper Networks Junos Space Security Director 24.1R4之前版本存在跨站脚本漏洞，该漏洞源于Web页面生成期间输入中和不当，可能导致存储型跨站脚本攻击。

N/A

N/A