Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9w3h-593p-q56r

Опубликовано: 29 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2 (newer versions were not tested; the vendor has not confirmed fixing the vulnerability).

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2 (newer versions were not tested; the vendor has not confirmed fixing the vulnerability).

EPSS

Процентиль: 30%
0.00115
Низкий

8.8 High

CVSS3

Дефекты

CWE-20
CWE-79

Связанные уязвимости

CVSS3: 8.8
nvd
около 2 лет назад

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown.

EPSS

Процентиль: 30%
0.00115
Низкий

8.8 High

CVSS3

Дефекты

CWE-20
CWE-79