Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5h27-7cmr-gg9r

Опубликовано: 28 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device.

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device.

EPSS

Процентиль: 69%
0.00592
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.5
nvd
больше 3 лет назад

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device.

EPSS

Процентиль: 69%
0.00592
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79