Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-37qv-3hw5-x3ph

Опубликовано: 12 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 4.8
CVSS3: 5.4

Описание

SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt.

SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt.

EPSS

Процентиль: 9%
0.00034
Низкий

4.8 Medium

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
около 2 месяцев назад

SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt.

EPSS

Процентиль: 9%
0.00034
Низкий

4.8 Medium

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-79