exploitDog

GHSA-42xx-v9rj-x9mp

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter.

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2021-40968
https://github.com/spotweb/spotweb/issues/711
https://github.com/spotweb/spotweb

EPSS

Процентиль: 82%

0.02239

Низкий

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2021-40968

CVSS3: 6.1

ubuntu

почти 5 лет назад

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter.

CVE-2021-40968

CVSS3: 6.1

nvd

почти 5 лет назад

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter.

CVE-2021-40968

CVSS3: 6.1

debian

почти 5 лет назад

Cross-site scripting (XSS) vulnerability in templates/installer/step-0 ...

EPSS

Процентиль: 82%

0.02239

Низкий

CVE ID

Дефекты

CWE-79