Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4ww3-585w-6p9r

Опубликовано: 04 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

There is an HTML injection vulnerability in Esri Portal for ArcGIS <=11.0 that may allow a remote, unauthenticated attacker to craft a URL which, when clicked, could potentially generate a message that may entice an unsuspecting victim to visit an arbitrary website. This could simplify phishing attacks.

There is an HTML injection vulnerability in Esri Portal for ArcGIS <=11.0 that may allow a remote, unauthenticated attacker to craft a URL which, when clicked, could potentially generate a message that may entice an unsuspecting victim to visit an arbitrary website. This could simplify phishing attacks.

EPSS

Процентиль: 61%
0.00419
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79
CWE-94

Связанные уязвимости

CVSS3: 6.1
nvd
почти 2 года назад

There is an HTML injection vulnerability in Esri Portal for ArcGIS 11.0 and below that may allow a remote, unauthenticated attacker to craft a URL which, when clicked, could potentially generate a message that may entice an unsuspecting victim to visit an arbitrary website. This could simplify phishing attacks.

EPSS

Процентиль: 61%
0.00419
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79
CWE-94