Threats affecting pkg:maven/dianping/cat

CVE-2026-124506 is a cross-site scripting (XSS) vulnerability in Dianping CAT versions 3.0.0, 3.1.0, and 4.0-RC1. It affects the Model.getDomain function in the Report Handler component, specifically in the WEB-INF/tags/hourlyReport.tag file. The vulnerability allows remote attackers to inject malicious scripts via the domain argument. Public exploit code has been disclosed, but there is no vendor response or patch available.

CVE-2026-124505 is an open redirect vulnerability in Dianping CAT versions 3.0.0, 3.1.0, and 4.0-RC1. The flaw exists in the Handler.redirect function of the Handler.java file within the Login/Logout component. Manipulating the rtnUrl argument can cause the application to redirect users to arbitrary external URLs. Exploit code has been published, but no vendor response or patch is currently available.