Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-44qv-5wxp-8xqv

Опубликовано: 07 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.

An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.

EPSS

Процентиль: 66%
0.00516
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 3.7
ubuntu
больше 3 лет назад

An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.

CVSS3: 3.7
nvd
больше 3 лет назад

An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.

CVSS3: 3.7
debian
больше 3 лет назад

An authenticated user can create a link with reflected Javascript code ...

CVSS3: 5.4
fstec
больше 3 лет назад

Уязвимость универсальной системы мониторинга Zabbix, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 66%
0.00516
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79