CVE-2026-22256 (CNNVD-202601-1401)
中文标题:
salvo 跨站脚本漏洞
英文标题:
Salvo is vulnerable to reflected XSS in the list_html function
漏洞描述
中文描述:
salvo是Salvo开源的一个web框架。 salvo 0.88.1之前版本存在跨站脚本漏洞，该漏洞源于list_html函数未正确清理路径，可能导致反射型跨站脚本攻击。
英文描述:
Salvo is a Rust web backend framework. Prior to version 0.88.1, the function list_html generate an file view of a folder which include a render of the current path, in which its inserted in the HTML without proper sanitation, this leads to reflected XSS using the fact that request path is decoded and normalized in the matching stage but not is inserted raw in the html view (current.path), the only constraint here is for the root path (eg. /files in the PoC example) to have a sub directory (e.g common ones styles/scripts/etc…) so that the matching return the list HTML page instead of the Not Found page. This issue has been patched in version 0.88.1.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| salvo-rs | salvo | < 0.88.1 | - | - |
cpe:2.3:a:salvo-rs:salvo:<_0.88.1:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
3.1 (cna)
HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2026-22256 |
2026-01-09 02:02:07 | 2026-01-12 02:12:38 |
| NVD | nvd_CVE-2026-22256 |
2026-01-09 03:00:10 | 2026-01-12 02:28:17 |
| CNNVD | cnnvd_CNNVD-202601-1401 |
2026-01-11 06:15:11 | 2026-01-12 02:38:14 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 跨站脚本
- cnnvd_id: 未提取 -> CNNVD-202601-1401
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- data_sources: ['cve'] -> ['cve', 'nvd']