exploitDog

GHSA-m3mh-8xqw-8mpx

Опубликовано: 20 июл. 2022

Источник: github

Github: Не прошло ревью

CVSS3: 6.1

Описание

Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the post function at /web/api/v1/upload/UploadHandler.php.

Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the post function at /web/api/v1/upload/UploadHandler.php.

Ссылки

EPSS

Процентиль: 46%

0.0023

Низкий

6.1 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2022-34025

CVSS3: 6.1

nvd

больше 3 лет назад

Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the post function at /web/api/v1/upload/UploadHandler.php.

EPSS

Процентиль: 46%

0.0023

Низкий

6.1 Medium

CVSS3

CVE ID

Дефекты

CWE-79