Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h7hj-cr59-59c2

Опубликовано: 10 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS) vulnerability in the console because document.write is used unsafely, which is relevant in scenarios where administrators use the console web interface to view instance console logs.

OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS) vulnerability in the console because document.write is used unsafely, which is relevant in scenarios where administrators use the console web interface to view instance console logs.

EPSS

Процентиль: 9%
0.0003
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
5 дней назад

OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS) vulnerability in the console because document.write is used unsafely, which is relevant in scenarios where administrators use the console web interface to view instance console logs.

EPSS

Процентиль: 9%
0.0003
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79