Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hg4r-9c4x-96jw

Опубликовано: 15 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly formatted file, the content may be reflected in the HTML response, allowing the attacker to execute malicious scripts or exfiltrate data.

The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly formatted file, the content may be reflected in the HTML response, allowing the attacker to execute malicious scripts or exfiltrate data.

EPSS

Процентиль: 58%
0.00373
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
около 1 года назад

The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly formatted file, the content may be reflected in the HTML response, allowing the attacker to execute malicious scripts or exfiltrate data.

CVSS3: 4.8
debian
около 1 года назад

The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Refl ...

EPSS

Процентиль: 58%
0.00373
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79