CVE-2023-2475

Name of the Vulnerable Software and Affected Versions Dromara J2eeFAST versions up to 2.6.0

Description A problematic issue affects the System Message Handler component, where the manipulation of the argument 主题 or ?? leads to cross-site scripting. The attack can be initiated remotely.

Recommendations For Dromara J2eeFAST versions up to 2.6.0, apply the patch named 7a9e1a00e3329fdc0ae05f7a8257cce77037134d to fix this issue. As a temporary workaround, consider restricting the manipulation of the 主题 or ?? argument in the System Message Handler component until the patch is applied.