Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-44jp-4j2r-4c78

Опубликовано: 31 мар. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.3

Описание

textpattern 4.8.7 is vulnerable to Cross Site Scripting (XSS) via /textpattern/index.php,Body. A remote and unauthenticated attacker can use XSS to trigger remote code execution by uploading a webshell. To do so they must first steal the CSRF token before submitting a file upload request.

textpattern 4.8.7 is vulnerable to Cross Site Scripting (XSS) via /textpattern/index.php,Body. A remote and unauthenticated attacker can use XSS to trigger remote code execution by uploading a webshell. To do so they must first steal the CSRF token before submitting a file upload request.

EPSS

Процентиль: 87%
0.03477
Низкий

8.3 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 8.3
nvd
почти 4 года назад

textpattern 4.8.7 is vulnerable to Cross Site Scripting (XSS) via /textpattern/index.php,Body. A remote and unauthenticated attacker can use XSS to trigger remote code execution by uploading a webshell. To do so they must first steal the CSRF token before submitting a file upload request.

CVSS3: 8.3
debian
почти 4 года назад

textpattern 4.8.7 is vulnerable to Cross Site Scripting (XSS) via /tex ...

EPSS

Процентиль: 87%
0.03477
Низкий

8.3 High

CVSS3

Дефекты

CWE-79