Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3jm3-3rrq-j9qm

Опубликовано: 30 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

The Velociraptor GUI contains an editor suggestion feature that can display the description field of a VQL function, plugin or artifact. This field was not properly sanitized and can lead to cross-site scripting (XSS). This issue was resolved in Velociraptor 0.6.5-2.

The Velociraptor GUI contains an editor suggestion feature that can display the description field of a VQL function, plugin or artifact. This field was not properly sanitized and can lead to cross-site scripting (XSS). This issue was resolved in Velociraptor 0.6.5-2.

EPSS

Процентиль: 65%
0.00496
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
больше 3 лет назад

The Velociraptor GUI contains an editor suggestion feature that can display the description field of a VQL function, plugin or artifact. This field was not properly sanitized and can lead to cross-site scripting (XSS). This issue was resolved in Velociraptor 0.6.5-2.

EPSS

Процентиль: 65%
0.00496
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79