漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Salvo is vulnerable to stored XSS in the list_html function by uploading files with malicious names
Vulnerability Description
Salvo is a Rust web backend framework. Prior to version 0.88.1, the function list_html generates a file view of a folder without sanitizing the files or folders names, this may potentially lead to XSS in cases where a website allow the access to public files using this feature and anyone can upload a file. This issue has been patched in version 0.88.1.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
salvo 跨站脚本漏洞
Vulnerability Description
salvo是Salvo开源的一个web框架。 salvo 0.88.1之前版本存在跨站脚本漏洞，该漏洞源于list_html函数未清理文件和文件夹名称，可能导致跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A