Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-546j-qhpr-6xqj

Опубликовано: 15 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task, it is possible to store malicious JavaScript code in the task description. This is later executed when it is reflected back to the user.

An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task, it is possible to store malicious JavaScript code in the task description. This is later executed when it is reflected back to the user.

EPSS

Процентиль: 43%
0.00206
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
почти 4 года назад

An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task, it is possible to store malicious JavaScript code in the task description. This is later executed when it is reflected back to the user.

EPSS

Процентиль: 43%
0.00206
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79