Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gqc6-9j5g-4r72

Опубликовано: 25 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via crafted uploaded file names.

Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via crafted uploaded file names.

EPSS

Процентиль: 63%
0.00457
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
ubuntu
почти 3 года назад

Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via crafted uploaded file names.

CVSS3: 6.1
nvd
почти 3 года назад

Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via crafted uploaded file names.

CVSS3: 6.1
debian
почти 3 года назад

Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and O ...

EPSS

Процентиль: 63%
0.00457
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-79