qzw1210/springboot_authority

There are some stored xss via admin/role/edit

Opened this issue · 1 comments

Echox1 commented

via admin/role/edit. roleKey, name and description parameters has stored xss
e06089c77a45544e92415f709b513fa
e2812ca873d04ead1fae02396f41d42

abergmann commented

CVE-2018-17369 was assigned to this issue.