Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4qxf-cfrr-vxjg

Опубликовано: 15 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. If an attacker sends a specially crafted request, the administrator of the product may be forced to access an arbitrary website when clicking a link in the audit log.

URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. If an attacker sends a specially crafted request, the administrator of the product may be forced to access an arbitrary website when clicking a link in the audit log.

EPSS

Процентиль: 49%
0.00255
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 4.7
nvd
почти 2 года назад

URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. If an attacker sends a specially crafted request, the administrator of the product may be forced to access an arbitrary website when clicking a link in the audit log.

EPSS

Процентиль: 49%
0.00255
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-601