Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-56h7-86m5-vpw2

Опубликовано: 26 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4, 10.1.0.0 through 10.1.0.5, and 10.2.0.0 through 10.2.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction and could allow an attacker to execute arbitrary scripts with a limited impact on the confidentiality and the integrity.

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4, 10.1.0.0 through 10.1.0.5, and 10.2.0.0 through 10.2.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction and could allow an attacker to execute arbitrary scripts with a limited impact on the confidentiality and the integrity.

EPSS

Процентиль: 25%
0.00086
Низкий

7.1 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 7.1
nvd
8 месяцев назад

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4, 10.1.0.0 through 10.1.0.5, and 10.2.0.0 through 10.2.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction and could allow an attacker to execute arbitrary scripts with a limited impact on the confidentiality and the integrity.

CVSS3: 7.1
fstec
11 месяцев назад

Уязвимость компонента Legacy Chat программного решения для управления контакт-центрами MiContact Center Business, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 25%
0.00086
Низкий

7.1 High

CVSS3

Дефекты

CWE-79