CVE:CVE-2020-11611
CNNVD:CNNVD-202004-382
xdLocalStorage是一款支持跨域数据存储的轻量级JavaScript库。
xdLocalStorage 2.0.5及之前版本中的xdLocalStorage.js文件的‘buildMessage()’函数中存在输入验证错误漏洞。攻击者可利用该漏洞获取敏感信息。
solution:Upgrade cross_domain_local_storage_project cross_domain_local_storage to a higher version than 2.0.5,and avoid the version (,2.0.5]