Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-72q8-4qfp-hvwx

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive information (page source code) via a combination of ?script? and ?/script? sequences in the id field, possibly related to a cross-site scripting (XSS) vulnerability.

The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive information (page source code) via a combination of ?script? and ?/script? sequences in the id field, possibly related to a cross-site scripting (XSS) vulnerability.

EPSS

Процентиль: 50%
0.00264
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
больше 17 лет назад

The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive information (page source code) via a combination of ?script? and ?/script? sequences in the id field, possibly related to a cross-site scripting (XSS) vulnerability.

EPSS

Процентиль: 50%
0.00264
Низкий

Дефекты

CWE-200