Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g566-qqx6-fg4r

Опубликовано: 15 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Cross-Site Scripting in FireEye EX, affecting version 9.0.3.936727. Exploitation of this vulnerability allows an attacker to send a specially crafted JavaScript payload via the 'type' and 's_f_name' parameters to an authenticated user to retrieve their session details.

Cross-Site Scripting in FireEye EX, affecting version 9.0.3.936727. Exploitation of this vulnerability allows an attacker to send a specially crafted JavaScript payload via the 'type' and 's_f_name' parameters to an authenticated user to retrieve their session details.

EPSS

Процентиль: 30%
0.00109
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
около 2 лет назад

Cross-Site Scripting in FireEye EX, affecting version 9.0.3.936727. Exploitation of this vulnerability allows an attacker to send a specially crafted JavaScript payload via the 'type' and 's_f_name' parameters to an authenticated user to retrieve their session details.

CVSS3: 6.1
fstec
около 2 лет назад

Уязвимость систем безопасности электронной почты FireEye EX 3500, 5500, 8500, позволяющая нарушителю выполнить межсайтовй скриптинг

EPSS

Процентиль: 30%
0.00109
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79