Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j5qm-g7fg-7pg9

Опубликовано: 10 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability. By tricking a user into clicking a crafted URL, a remote unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other sensitive information.

HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability. By tricking a user into clicking a crafted URL, a remote unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other sensitive information.

EPSS

Процентиль: 33%
0.00129
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 8.3
nvd
почти 3 года назад

HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability.  By tricking a user into clicking a crafted URL, a remote unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other sensitive information.

EPSS

Процентиль: 33%
0.00129
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79