Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2px3-mvqp-56jf

Опубликовано: 10 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

Due to insufficient encoding of user-controlled inputs, SAP NetWeaver AS Java allows malicious scripts to be executed in the login application. This has a limited impact on confidentiality and integrity of the application. There is no impact on availability.

Due to insufficient encoding of user-controlled inputs, SAP NetWeaver AS Java allows malicious scripts to be executed in the login application. This has a limited impact on confidentiality and integrity of the application. There is no impact on availability.

EPSS

Процентиль: 30%
0.00112
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
больше 1 года назад

Due to insufficient encoding of user-controlled inputs, SAP NetWeaver AS Java allows malicious scripts to be executed in the login application. This has a limited impact on confidentiality and integrity of the application. There is no impact on availability.

EPSS

Процентиль: 30%
0.00112
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79