Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8pcc-94cg-8pr4

Опубликовано: 30 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A vulnerability was found in TrueConf Server 4.3.7 and classified as problematic. This issue affects some unknown processing of the file /admin/conferences/list/. The manipulation of the argument sort leads to basic cross site scripting (Reflected). The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

A vulnerability was found in TrueConf Server 4.3.7 and classified as problematic. This issue affects some unknown processing of the file /admin/conferences/list/. The manipulation of the argument sort leads to basic cross site scripting (Reflected). The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 51%
0.00281
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79
CWE-80

Связанные уязвимости

CVSS3: 3.5
nvd
больше 3 лет назад

A vulnerability was found in TrueConf Server 4.3.7 and classified as problematic. This issue affects some unknown processing of the file /admin/conferences/list/. The manipulation of the argument sort leads to basic cross site scripting (Reflected). The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 3.5
fstec
больше 3 лет назад

Уязвимость компонента /admin/conferences/list/ программного обеспечения TrueConf Server, позволяющая нарушителю осуществить межсайтовые сценарные атаки

EPSS

Процентиль: 51%
0.00281
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79
CWE-80