Description
The vulnerability stems from improper sanitization of LLM outputs. Malicious content may be rendered or executed if the response is not adequately handled.
Remediation
Enhance output sanitization and validation. Ensure that all responses from the LLM are properly processed and any untrusted content is safely handled.
References
Related Vulnerabilities
MediaWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2020-10960)
Client Side Template Injection
Envoy Proxy Improper Encoding or Escaping of Output Vulnerability (CVE-2024-45808)
Apache Tomcat Improper Encoding or Escaping of Output Vulnerability (CVE-2022-45143)
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2023-26472)