Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting
Vulnerability Description
A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been declared as problematic. This vulnerability affects the function xssFilter of the file src/main/java/com/jeesite/common/codec/EncodeUtils.java of the component XSS Filter. The manipulation of the argument text leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3585737d21fe490ff6948d913fcbd8d99c41fc08. It is recommended to apply a patch to fix this issue.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Thinkgem JeeSite 代码注入漏洞
Vulnerability Description
Thinkgem JeeSite是中国卓源（Thinkgem）公司的一套开源的Java EE企业级快速开发平台。该平台包括系统权限组件、数据权限组件、数据字典组件、核心工具组件、视图操作组件、工作流组件和代码生成组件等。 thinkgem JeeSite 5.12.0及之前版本存在代码注入漏洞，该漏洞源于文件EncodeUtils.java中xssFilter函数对参数text处理不当导致跨站脚本。
CVSS Information
N/A
Vulnerability Type
N/A