Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6h63-w9wm-rccq

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user to load an untrusted site in an ePO iframe which could steal information from the authenticated user.

Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user to load an untrusted site in an ePO iframe which could steal information from the authenticated user.

EPSS

Процентиль: 65%
0.005
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.3
nvd
почти 5 лет назад

Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user to load an untrusted site in an ePO iframe which could steal information from the authenticated user.

EPSS

Процентиль: 65%
0.005
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-601