Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8f87-pmx7-ffqx

Опубликовано: 12 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being served to other users, thereby expanding the attack scope, resulting in Stored Cross-Site Scripting (XSS) vulnerability leading to limited impact on Confidentiality, Integrity and Availability.

The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being served to other users, thereby expanding the attack scope, resulting in Stored Cross-Site Scripting (XSS) vulnerability leading to limited impact on Confidentiality, Integrity and Availability.

EPSS

Процентиль: 57%
0.00351
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 3 лет назад

The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being served to other users, thereby expanding the attack scope, resulting in Stored Cross-Site Scripting (XSS) vulnerability leading to limited impact on Confidentiality, Integrity and Availability.

EPSS

Процентиль: 57%
0.00351
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79