exploitDog

GHSA-99g4-9pcm-g9gx

Опубликовано: 03 апр. 2024

Источник: github

Github: Не прошло ревью

CVSS3: 6.1

Описание

Cross Site Scripting vulnerability in Huly Platform v.0.6.202 allows attackers to execute arbitrary code via upload of crafted SVG file to issues.

Cross Site Scripting vulnerability in Huly Platform v.0.6.202 allows attackers to execute arbitrary code via upload of crafted SVG file to issues.

Ссылки

EPSS

Процентиль: 45%

0.00225

Низкий

6.1 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2024-27706

CVSS3: 6.1

nvd

почти 2 года назад

Cross Site Scripting vulnerability in Huly Platform v.0.6.202 allows attackers to execute arbitrary code via upload of crafted SVG file to issues.

EPSS

Процентиль: 45%

0.00225

Низкий

6.1 Medium

CVSS3

CVE ID

Дефекты

CWE-79