Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4c8p-2m43-22fp

Опубликовано: 07 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malicious javascript code during a user's session.

The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malicious javascript code during a user's session.

EPSS

Процентиль: 8%
0.00029
Низкий

7.5 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 7.5
nvd
около 2 лет назад

The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malicious javascript code during a user's session.

EPSS

Процентиль: 8%
0.00029
Низкий

7.5 High

CVSS3

Дефекты

CWE-79