Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gmxc-263m-5hqx

Опубликовано: 12 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.7

Описание

Dell Unity, versions prior to 5.4, contains a cross-site scripting (XSS) vulnerability. An authenticated attacker could potentially exploit this vulnerability, leading users to download and execute malicious software crafted by this product's feature to compromise their systems.

Dell Unity, versions prior to 5.4, contains a cross-site scripting (XSS) vulnerability. An authenticated attacker could potentially exploit this vulnerability, leading users to download and execute malicious software crafted by this product's feature to compromise their systems.

EPSS

Процентиль: 60%
0.00396
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-20
CWE-79

Связанные уязвимости

CVSS3: 5.7
nvd
почти 2 года назад

Dell Unity, version(s) 5.3 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

CVSS3: 5.7
fstec
почти 2 года назад

Уязвимость операционной среды для управления и обеспечения работы хранилища данных Dell Unity Operating Environment (OE), существующая из-за непринятия мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)

EPSS

Процентиль: 60%
0.00396
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-20
CWE-79