Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3p84-8c6q-j555

Опубликовано: 04 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary parameter appended to the URL.

In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary parameter appended to the URL.

EPSS

Процентиль: 21%
0.00287
Низкий

7.1 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 7.1
nvd
13 дней назад

In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary parameter appended to the URL.

EPSS

Процентиль: 21%
0.00287
Низкий

7.1 High

CVSS3

Дефекты

CWE-79