Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-24wq-mq98-wpxw

Опубликовано: 26 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Stored cross-site scripting vulnerability which is exploiting a behavior of the XSS Filter exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.

Stored cross-site scripting vulnerability which is exploiting a behavior of the XSS Filter exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.

EPSS

Процентиль: 79%
0.01289
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
почти 2 года назад

Stored cross-site scripting vulnerability which is exploiting a behavior of the XSS Filter exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.

EPSS

Процентиль: 79%
0.01289
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79