Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j6v8-rcm6-wxr2

Опубликовано: 06 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.6

Описание

Rendering of HTML provided by another authenticated user is possible in browser on M-Files Web before 22.12.12140.3. This allows the content to steal user sensitive information. This issue affects M-Files New Web: before 22.12.12140.3.

Rendering of HTML provided by another authenticated user is possible in browser on M-Files Web before 22.12.12140.3. This allows the content to steal user sensitive information. This issue affects M-Files New Web: before 22.12.12140.3.

EPSS

Процентиль: 52%
0.00287
Низкий

7.6 High

CVSS3

Дефекты

CWE-200
CWE-79

Связанные уязвимости

CVSS3: 5
nvd
почти 3 года назад

Rendering of HTML provided by another authenticated user is possible in browser on M-Files Web before 22.12.12140.3. This allows the content to steal user sensitive information. This issue affects M-Files New Web: before 22.12.12140.3.

EPSS

Процентиль: 52%
0.00287
Низкий

7.6 High

CVSS3

Дефекты

CWE-200
CWE-79