Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3j5h-p2g7-9wc9

Опубликовано: 13 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

An XSS vulnerability stored in Repox has been identified, which allows a local attacker to store a specially crafted JavaScript payload on the server, due to the lack of proper sanitisation of field elements, allowing the attacker to trigger the malicious payload when the application loads.

An XSS vulnerability stored in Repox has been identified, which allows a local attacker to store a specially crafted JavaScript payload on the server, due to the lack of proper sanitisation of field elements, allowing the attacker to trigger the malicious payload when the application loads.

EPSS

Процентиль: 19%
0.00061
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.5
nvd
около 2 лет назад

An XSS vulnerability stored in Repox has been identified, which allows a local attacker to store a specially crafted JavaScript payload on the server, due to the lack of proper sanitisation of field elements, allowing the attacker to trigger the malicious payload when the application loads.

EPSS

Процентиль: 19%
0.00061
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-79