Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hh4g-95jr-4v9q

Опубликовано: 30 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to execute arbitrary client-side code in the context of another user's browser via multiple crafted HTTP requests.

A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to execute arbitrary client-side code in the context of another user's browser via multiple crafted HTTP requests.

EPSS

Процентиль: 29%
0.00104
Низкий

7.1 High

CVSS3

Дефекты

CWE-116

Связанные уязвимости

CVSS3: 7.1
nvd
9 месяцев назад

A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to execute arbitrary client-side code in the context of another user's browser via multiple crafted HTTP requests.

EPSS

Процентиль: 29%
0.00104
Низкий

7.1 High

CVSS3

Дефекты

CWE-116