Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3gf3-q286-fvmm

Опубликовано: 21 мая 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2.4

Описание

Input provided in a field containing "activationMessage" in Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack.

This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite).

Input provided in a field containing "activationMessage" in Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack.

This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite).

EPSS

Процентиль: 12%
0.00214
Низкий

2.4 Low

CVSS4

Дефекты

CWE-79

Связанные уязвимости

nvd
больше 1 года назад

Input provided in a field containing "activationMessage" in Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack. This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite).

EPSS

Процентиль: 12%
0.00214
Низкий

2.4 Low

CVSS4

Дефекты

CWE-79