Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6fr9-c775-x826

Опубликовано: 12 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.

EPSS

Процентиль: 46%
0.00231
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
redhat
почти 3 года назад

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.

CVSS3: 5.4
nvd
больше 2 лет назад

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.

CVSS3: 5.4
debian
больше 2 лет назад

A stored Cross-site scripting vulnerability was found in foreman. The ...

EPSS

Процентиль: 46%
0.00231
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79