Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jp6f-j3wp-f46r

Опубликовано: 26 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Mahara before 22.10.6, 23.04.6, and 24.04.1 allows cross-site scripting (XSS) via a file, with JavaScript code as part of its name, that is uploaded via the Mahara filebrowser system.

Mahara before 22.10.6, 23.04.6, and 24.04.1 allows cross-site scripting (XSS) via a file, with JavaScript code as part of its name, that is uploaded via the Mahara filebrowser system.

EPSS

Процентиль: 15%
0.00048
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
6 месяцев назад

Mahara before 22.10.6, 23.04.6, and 24.04.1 allows cross-site scripting (XSS) via a file, with JavaScript code as part of its name, that is uploaded via the Mahara filebrowser system.

CVSS3: 6.1
debian
6 месяцев назад

Mahara before 22.10.6, 23.04.6, and 24.04.1 allows cross-site scriptin ...

EPSS

Процентиль: 15%
0.00048
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79