Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4gxc-qfxh-4hf6

Опубликовано: 11 мар. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting (XSS) attack. It was noted that the Metric parameter does not have any input checks on the user input that allows an attacker to craft its own malicious payload to trigger a XSS vulnerability.

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting (XSS) attack. It was noted that the Metric parameter does not have any input checks on the user input that allows an attacker to craft its own malicious payload to trigger a XSS vulnerability.

EPSS

Процентиль: 42%
0.00202
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.7
nvd
почти 4 года назад

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting (XSS) attack. It was noted that the Metric parameter does not have any input checks on the user input that allows an attacker to craft its own malicious payload to trigger a XSS vulnerability.

EPSS

Процентиль: 42%
0.00202
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79