Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3gf3-q286-fvmm

Опубликовано: 21 мая 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2.4

Описание

Input provided in a field containing "activationMessage" in Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack.

This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite).

Input provided in a field containing "activationMessage" in Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack.

This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite).

EPSS

Процентиль: 8%
0.0003
Низкий

2.4 Low

CVSS4

Дефекты

CWE-79

Связанные уязвимости

nvd
9 месяцев назад

Input provided in a field containing "activationMessage" in Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack. This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite).

EPSS

Процентиль: 8%
0.0003
Низкий

2.4 Low

CVSS4

Дефекты

CWE-79