jstachio__jstachio_CVE-2023-33962_1-0-0

一个类型安全的 Java Mustache 模板引擎。 模板被编译成可读的 Java 源代码，值绑定在编译时静态检查。 文档 最新 SNAPSHOT 版本 JStachio 文档 当前发布版 JStachio 文档 该文档也位于 javadoc.io，但不像上面那样聚合。聚合的 javadoc 是首选的文档形式，本 README 的其余部分主要用于 宣传 营销目的。 对于之前的版本： root@kitploit: https://jstach.io/doc/jstachio/VERSION/apidocs 其中 VERSION 是你想要的版本号。 为什么选择 JStachio 详见...

CVE-2023-33962

JStachio is a type-safe Java Mustache templating engine. Prior to version 1.0.1, JStachio fails to escape single quotes ' in HTML, allowing an attacker to inject malicious code. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of other users...

CVE-2023-33962

CVE-2023-33962 (JStachio) : The vulnerability affects the JStachio Java Mustache templating engine prior to version 1.0.1, where single quotes in HTML are not escaped. This can allow an attacker to inject malicious code and potentially execute arbitrary JavaScript in the context of other users vi...

CVE-2023-33962 JStachio XSS vulnerability: Unescaped single quotes

JStachio is a type-safe Java Mustache templating engine. Prior to version 1.0.1, JStachio fails to escape single quotes ' in HTML, allowing an attacker to inject malicious code. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of other users...