CVE:CVE-2019-25088
CNNVD:CNNVD-202212-3949
Oxidized Web是用于 Oxidized 的 Web UI + RESTful API。
Oxidized Web存在跨站脚本漏洞，该漏洞源于对参数to_research的错误操作会导致跨站点脚本编写。
solution:Upgrade oxidized_web_project oxidized_web to a higher version than 2019-07-01,and avoid the version (,2019-07-01)