CVE-2026-57533
2026-06-25
15h16 +00:00
15h16 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Malicious HTML content could be injected into the page pretix shows when
redirection to an untrusted page occurs. Since this page has a
Content-Security-Policy, this can mainly be used for phishing purposes.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Neutralization of Script-Related HTML Tags in a Web Page The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. |
