Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fp5g-m5q3-5gch

Опубликовано: 15 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Stored cross-site scripting vulnerability in the Create event section in Pandora FMS Console v766 and lower. An attacker typically exploits this vulnerability by injecting XSS payloads on popular pages of a site or passing a link to a victim, tricking them into viewing the page that contains the stored XSS payload.

Stored cross-site scripting vulnerability in the Create event section in Pandora FMS Console v766 and lower. An attacker typically exploits this vulnerability by injecting XSS payloads on popular pages of a site or passing a link to a victim, tricking them into viewing the page that contains the stored XSS payload.

EPSS

Процентиль: 47%
0.00241
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-352
CWE-79

Связанные уязвимости

CVSS3: 7.6
ubuntu
почти 3 года назад

Stored cross-site scripting vulnerability in the Create event section in Pandora FMS Console v766 and lower. An attacker typically exploits this vulnerability by injecting XSS payloads on popular pages of a site or passing a link to a victim, tricking them into viewing the page that contains the stored XSS payload.

CVSS3: 7.6
nvd
почти 3 года назад

Stored cross-site scripting vulnerability in the Create event section in Pandora FMS Console v766 and lower. An attacker typically exploits this vulnerability by injecting XSS payloads on popular pages of a site or passing a link to a victim, tricking them into viewing the page that contains the stored XSS payload.

EPSS

Процентиль: 47%
0.00241
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-352
CWE-79