Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jpmh-qrhq-g32f

Опубликовано: 25 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

AlgoSec FireFlow Reflected Cross-Site-Scripting (RXSS): A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result.html page. The malicious user changes the request from POST to GET and sends the URL to another user (victim). JavaScript code is executed on the browser of the other user.

AlgoSec FireFlow Reflected Cross-Site-Scripting (RXSS): A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result.html page. The malicious user changes the request from POST to GET and sends the URL to another user (victim). JavaScript code is executed on the browser of the other user.

EPSS

Процентиль: 38%
0.00168
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.5
nvd
больше 3 лет назад

AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS) A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result.html page. The malicious user changes the request from POST to GET and sends the URL to another user (victim). JavaScript code is executed on the browser of the other user.

EPSS

Процентиль: 38%
0.00168
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79