Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SAK-52311: Sakai site-manage group titles can contain XSS content
Vulnerability Description
Sakai is a Collaboration and Learning Environment (CLE). In versions 23.0 through 23.4 and 25.0 through 25.1, group titles and description can contain cross-site scripting scripts. The patch is included in releases 25.2 and 23.5. As a workaround, one can check the SAKAI_SITE_GROUP table for titles and descriptions that contain this info.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Sakai 跨站脚本漏洞
Vulnerability Description
Sakai是Apereo Sakai开源的一个免费提供、功能丰富的技术解决方案，用于学习、教学、研究和协作。 Sakai 23.4及之前版本和25.1及之前版本存在跨站脚本漏洞，该漏洞源于组标题和描述字段清理不当，可能导致跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A