exploitDog

GHSA-hjqv-h3x6-5mvj

Опубликовано: 14 мая 2022

Источник: github

Github: Не прошло ревью

CVSS3: 5.4

Описание

XSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID parameter.

XSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID parameter.

Ссылки

EPSS

Процентиль: 51%

0.00282

Низкий

5.4 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2017-5875

CVSS3: 5.4

nvd

около 9 лет назад

XSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID parameter.

EPSS

Процентиль: 51%

0.00282

Низкий

5.4 Medium

CVSS3

CVE ID

Дефекты

CWE-79