GHSA-7q49-9j54-8r38

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

CVSS3: 6.1

Описание

A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of error message during template import preview in the xml_path field

Ссылки

EPSS

Процентиль: 80%

0.01458

Низкий

6.1 Medium

CVSS3

CVE ID

CVE-2020-25706

Дефекты

CWE-79

Связанные уязвимости

CVE-2020-25706

CVSS3: 5.4

ubuntu

около 5 лет назад

A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of error message during template import preview in the xml_path field

CVE-2020-25706

CVSS3: 5.4

nvd

около 5 лет назад

A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of error message during template import preview in the xml_path field

CVE-2020-25706

CVSS3: 5.4

debian

около 5 лет назад

A cross-site scripting (XSS) vulnerability exists in templates_import. ...

EPSS

Процентиль: 80%

0.01458

Низкий

6.1 Medium

CVSS3

CVE ID

CVE-2020-25706

Дефекты

CWE-79