Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f56c-m4fp-2fhv

Опубликовано: 27 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the encoder address can send a crafted link to a user, which will execute JavaScript code in the context of the user.

An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the encoder address can send a crafted link to a user, which will execute JavaScript code in the context of the user.

EPSS

Процентиль: 67%
0.00542
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.8
nvd
больше 3 лет назад

An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the encoder address can send a crafted link to a user, which will execute JavaScript code in the context of the user.

EPSS

Процентиль: 67%
0.00542
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-79