exploitDog

GHSA-466m-m85x-cqj9

Опубликовано: 09 апр. 2022

Источник: github

Github: Не прошло ревью

CVSS3: 6.1

Описание

A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers inject arbitrary HTML or JavaScript through /example/editor.

A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers inject arbitrary HTML or JavaScript through /example/editor.

Ссылки

EPSS

Процентиль: 57%

0.00352

Низкий

6.1 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2022-24229

CVSS3: 6.1

nvd

почти 4 года назад

A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers inject arbitrary HTML or JavaScript through /example/editor.

EPSS

Процентиль: 57%

0.00352

Низкий

6.1 Medium

CVSS3

CVE ID

Дефекты

CWE-79