Описание
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| znuny | fixed | 6.5.11-1 | package | |
| znuny | no-dsa | bookworm | package |
Примечания
https://www.znuny.org/en/advisories/zsa-2024-05
EPSS
Процентиль: 75%
0.00865
Низкий
Связанные уязвимости
CVSS3: 6.1
ubuntu
больше 1 года назад
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed.
CVSS3: 6.1
nvd
больше 1 года назад
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed.
CVSS3: 6.1
github
больше 1 года назад
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed.
EPSS
Процентиль: 75%
0.00865
Низкий