Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g6vp-qx8j-gqr4

Опубликовано: 07 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2.2
CVSS3: 5.4

Описание

A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data.

We have already fixed the vulnerability in the following versions: Download Station 5.10.0.305 ( 2025/09/16 ) and later Download Station 5.10.0.304 ( 2025/09/08 ) and later

A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data.

We have already fixed the vulnerability in the following versions: Download Station 5.10.0.305 ( 2025/09/16 ) and later Download Station 5.10.0.304 ( 2025/09/08 ) and later

EPSS

Процентиль: 28%
0.00099
Низкий

2.2 Low

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
3 месяца назад

A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: Download Station 5.10.0.305 ( 2025/09/16 ) and later Download Station 5.10.0.304 ( 2025/09/08 ) and later

EPSS

Процентиль: 28%
0.00099
Низкий

2.2 Low

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-79