Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4xm5-v879-59g7

Опубликовано: 19 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

FusionPBX prior to 5.1.0 contains a cross-site scripting vulnerability. If this vulnerability is exploited by a remote authenticated attacker with an administrative privilege, an arbitrary script may be executed on the web browser of the user who is logging in to the product.

FusionPBX prior to 5.1.0 contains a cross-site scripting vulnerability. If this vulnerability is exploited by a remote authenticated attacker with an administrative privilege, an arbitrary script may be executed on the web browser of the user who is logging in to the product.

EPSS

Процентиль: 28%
0.00101
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
около 2 лет назад

FusionPBX prior to 5.1.0 contains a cross-site scripting vulnerability. If this vulnerability is exploited by a remote authenticated attacker with an administrative privilege, an arbitrary script may be executed on the web browser of the user who is logging in to the product.

EPSS

Процентиль: 28%
0.00101
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79