Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-23r4-x5xc-qw4f

Опубликовано: 10 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Cross Site Scripting (XSS) vulnerability in in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify before 4.0.0 for Confluence allows attackers to manipulate user data via specially crafted certificate.

Cross Site Scripting (XSS) vulnerability in in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify before 4.0.0 for Confluence allows attackers to manipulate user data via specially crafted certificate.

EPSS

Процентиль: 64%
0.00474
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 1 года назад

Cross Site Scripting (XSS) vulnerability in in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify before 4.0.0 for Confluence allows attackers to manipulate user data via specially crafted certificate.

EPSS

Процентиль: 64%
0.00474
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79