Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h75v-vvch-93vf

Опубликовано: 09 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 5.5

Описание

Newforma Info Exchange (NIX) provides a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files that contain JavaScript or other content that may be executed or rendered by a web browser using a mobile user agent.

Newforma Info Exchange (NIX) provides a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files that contain JavaScript or other content that may be executed or rendered by a web browser using a mobile user agent.

EPSS

Процентиль: 17%
0.00053
Низкий

5.1 Medium

CVSS4

5.5 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.5
nvd
4 месяца назад

Newforma Info Exchange (NIX) provides a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files that contain JavaScript or other content that may be executed or rendered by a web browser using a mobile user agent.

EPSS

Процентиль: 17%
0.00053
Низкий

5.1 Medium

CVSS4

5.5 Medium

CVSS3

Дефекты

CWE-79