Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-48x4-5v77-j7h6

Опубликовано: 03 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint. The os_username parameters is not correctly sanitized, leading to reflected XSS.

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint. The os_username parameters is not correctly sanitized, leading to reflected XSS.

EPSS

Процентиль: 56%
0.00337
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 3 лет назад

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint. The os_username parameters is not correctly sanitized, leading to reflected XSS.

EPSS

Процентиль: 56%
0.00337
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79