Description
cool-admin-java是COOL个人开发者的一个后台权限管理框架。 cool-admin-java v1.0版本存在跨站脚本漏洞。攻击者利用该漏洞可以通过向internet pictures字段注入特制有效载荷来执行任意 Web 脚本或 HTML。
cool-admin-java 跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.knowsafe.com/ti/info/0/993323
https://vuldb.com/zh/vuln/295138
https://nvd.nist.gov/vuln/detail/CVE-2024-57409
https://cve.imfht.com/detail/CVE-2024-57409
https://github.com/advisories/GHSA-3g5r-c4ph-rc9c
https://access.redhat.com/security/cve/cve-2024-57409
https://avd.aliyun.com/detail?id=AVD-2024-57408