Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cw43-3hjf-j7v7

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary JavaScript in the deviceId GET parameter to devicemgmnt.php.

rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary JavaScript in the deviceId GET parameter to devicemgmnt.php.

EPSS

Процентиль: 98%
0.54902
Средний

Связанные уязвимости

CVSS3: 5.4
nvd
больше 5 лет назад

rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary JavaScript in the deviceId GET parameter to devicemgmnt.php.

EPSS

Процентиль: 98%
0.54902
Средний