exploitDog

GHSA-436q-6h4x-h2hj

Опубликовано: 11 дек. 2023

Источник: github

Github: Не прошло ревью

CVSS3: 5.4

Описание

A stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an SVG document uploaded by an authenticated user.

A stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an SVG document uploaded by an authenticated user.

Ссылки

EPSS

Процентиль: 32%

0.00125

Низкий

5.4 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2023-50465

CVSS3: 5.4

nvd

около 2 лет назад

A stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an SVG document uploaded by an authenticated user.

EPSS

Процентиль: 32%

0.00125

Низкий

5.4 Medium

CVSS3

CVE ID

Дефекты

CWE-79