Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jwv4-36xj-9f72

Опубликовано: 26 мая 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.1

Описание

Stored Cross-Site Scripting (XSS) vulnerability in i2A-Cronos version 23.02.01.17, from i2A. It allows an authenticated attacker to upload a malicious SVG image into the user's personal space in /CronosWeb/Modules/Persons/PersonalDocuments/PersonalDocuments. There is no reported fix at this time.

Stored Cross-Site Scripting (XSS) vulnerability in i2A-Cronos version 23.02.01.17, from i2A. It allows an authenticated attacker to upload a malicious SVG image into the user's personal space in /CronosWeb/Modules/Persons/PersonalDocuments/PersonalDocuments. There is no reported fix at this time.

EPSS

Процентиль: 19%
0.0006
Низкий

5.1 Medium

CVSS4

Дефекты

CWE-79

Связанные уязвимости

nvd
9 месяцев назад

Stored Cross-Site Scripting (XSS) vulnerability in i2A-Cronos version 23.02.01.17, from i2A. It allows an authenticated attacker to upload a malicious SVG image into the user's personal space in /CronosWeb/Modules/Persons/PersonalDocuments/PersonalDocuments. There is no reported fix at this time.

EPSS

Процентиль: 19%
0.0006
Низкий

5.1 Medium

CVSS4

Дефекты

CWE-79