CVE:CVE-2022-36180
CNNVD:CNNVD-202211-3275
FusionDIrectory是FusionDIrectory开源的一种应用程序。用于确保您的身份管理安全。
Fusiondirectory 1.3版本存在安全漏洞。攻击者利用该漏洞通过/fusiondirectory/index.php?message=[injection], /fusiondirectory/index.php?message=invalidparameter&plug={Injection], /fusiondirectory/index.php?signout=1&message=[injection]&plug=106执行跨站脚本攻击。
solution:Upgrade fusiondirectory fusiondirectory to a higher version than 1.3,and avoid the version 1.3