Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c289-47qf-rvrr

Опубликовано: 21 дек. 2018
Источник: github
Github: Прошло ревью
CVSS3: 6.1

Описание

Cross Site Scripting (XSS) vulnerability in easymon

easymon version 1.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Endpoint where monitoring is mounted that can result in Reflected XSS that affects Firefox. Can be used to steal cookies, depending on the cookie settings.. This attack appear to be exploitable via The victim must click on a crafted URL that contains the XSS payload. This vulnerability appears to have been fixed in 1.4.1 and later.

Пакеты

Наименование

easymon

rubygems
Затронутые версииВерсия исправления

< 1.4.1

1.4.1

EPSS

Процентиль: 47%
0.0024
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
около 7 лет назад

easymon version 1.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Endpoint where monitoring is mounted that can result in Reflected XSS that affects Firefox. Can be used to steal cookies, depending on the cookie settings.. This attack appear to be exploitable via The victim must click on a crafted URL that contains the XSS payload. This vulnerability appears to have been fixed in 1.4.1 and later.

EPSS

Процентиль: 47%
0.0024
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79