Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8xr9-89pc-8wcx

Опубликовано: 04 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.1 and below that may allow a remote, unauthenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser.

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.1 and below that may allow a remote, unauthenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser.

EPSS

Процентиль: 47%
0.0024
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-79
CWE-80

Связанные уязвимости

CVSS3: 4.7
nvd
почти 2 года назад

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.1 and below that may allow a remote, unauthenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser.

EPSS

Процентиль: 47%
0.0024
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-79
CWE-80