CNNVD-202601-1402 Information
Jan 08, 2026
cve
CNNVD ID
CNNVD-202601-1402
Related CVE
- CNNVD Published: 2026-01-08
Description (Chinese)
salvo是Salvo开源的一个web框架。 salvo 0.88.1之前版本存在跨站脚本漏洞，该漏洞源于list_html函数未清理文件和文件夹名称，可能导致跨站脚本攻击。
Description (English)
Salvo is a web-based framework from Salvo Open Source. The pre-salvo 0.88.1 version has a cross-site script loophole, which stems from the fact that the list html function does not clean up the file and folder name and may result in a cross-script attack.
Hazard Level
Medium
Vulnerability Type
跨站脚本
Affected Vendor
Salvo
Published
2026-01-08
Last Modified
2026-02-24
References
https://github.com/salvo-rs/salvo/blob/16efeba312a274739606ce76366d921768628654/crates/serve-static/src/dir.rs#L581 https://github.com/salvo-rs/salvo/security/advisories/GHSA-54m3-5fxr-2f3j https://access.redhat.com/security/cve/cve-2026-22257
Patch
https://github.com/salvo-rs/salvo/releases
Share on: