OpenText Content Suite Platform 安全漏洞

OpenText Content Suite Platform is a top-of-the-line enterprise content management ECM system from OpenText. can manage the entire enterprise information lifecycle, from capture to archiving and disposal. A security vulnerability exists in OpenText Content Suite Platform version 22.1 that stems...

CVE-2022-45928: Improper Control of Generation of Code

A remote OScript execution issue was discovered in OpenText Content Suite Platform 22.1 16.2.19.1803. Multiple endpoints allow the user to pass the parameter htmlFile, which is included in the HTML output rendering pipeline of a request. Because the Content Server evaluates and executes Oscript...

CVE-2022-38223

An out-of-bounds write-in check type flaw was found in the etc.c function in w3m, triggered by sending a crafted HTML file to the w3m binary. This flaw allows an attacker to cause a denial of service and other possible impacts...

GHSA-HH8V-JMH3-9437 Cross-site scripting in SocksJS-node

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c aka callback parameter...

Cross-site scripting in SocksJS-node

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c aka callback parameter...

CVE-2020-8823

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c aka callback parameter...

Cross site scripting

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c aka callback parameter...

CVE-2020-8823

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c aka callback parameter...

CVE-2020-8823

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c aka callback parameter...

CVE-2020-8823

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c aka callback parameter...

SockJS Cross-Site Scripting Vulnerability

SockJS is a browser JavaScript library that provides WebSocket-like objects. A reflective cross-site scripting vulnerability exists in htmlfile in lib/transport/htmlfile.js in versions of SockJS prior to 3.0. An attacker can exploit this vulnerability with the /htmlfile c parameter to conduct a...

PT-2020-20306

Name of the Vulnerable Software and Affected Versions SockJS versions prior to 0.3.0 Description The issue concerns a Reflected XSS vulnerability via the c also known as callback parameter in the /htmlfile endpoint. This allows for potential malicious script execution. Recommendations For version...

CVE-2020-8823: Improper Neutralization of Input During Web Page Generation

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c aka callback parameter...

CVE-2001-0149: Undefined Security Weakness

Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object...