Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jjqv-cfcp-2xj7

Опубликовано: 05 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

A flaw was found in the Katello plugin for Foreman, where it is possible to store malicious JavaScript code in the "Description" field of a user. This code can be executed when opening certain pages, for example, Host Collections.

A flaw was found in the Katello plugin for Foreman, where it is possible to store malicious JavaScript code in the "Description" field of a user. This code can be executed when opening certain pages, for example, Host Collections.

EPSS

Процентиль: 30%
0.00108
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
redhat
больше 1 года назад

A flaw was found in the Katello plugin for Foreman, where it is possible to store malicious JavaScript code in the "Description" field of a user. This code can be executed when opening certain pages, for example, Host Collections.

CVSS3: 4.8
nvd
больше 1 года назад

A flaw was found in the Katello plugin for Foreman, where it is possible to store malicious JavaScript code in the "Description" field of a user. This code can be executed when opening certain pages, for example, Host Collections.

EPSS

Процентиль: 30%
0.00108
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79