Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2mjf-6957-c593

Опубликовано: 09 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Router Port Forward functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to inject arbitrary web script or HTML via unspecified vectors.

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Router Port Forward functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to inject arbitrary web script or HTML via unspecified vectors.

EPSS

Процентиль: 76%
0.00935
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.9
nvd
около 1 года назад

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Router Port Forward functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive information and conduct limited denial-of-service attacks by injecting arbitrary web script or HTML.

CVSS3: 5.9
fstec
больше 1 года назад

Уязвимость компонента Router Port Forward операционной системы для управления сетевыми устройствами Synology Router Manager, позволяющая нарушителю проводить межсайтовые сценарные атаки

EPSS

Процентиль: 76%
0.00935
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-79