Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mvq6-6vw6-prj5

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing (1) JavaScript or (2) HTTP headers via an unspecified vector, possibly the forwardTo parameter to redirect.do. NOTE: the impact might be cross-site scripting (XSS) or HTTP request smuggling.

Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing (1) JavaScript or (2) HTTP headers via an unspecified vector, possibly the forwardTo parameter to redirect.do. NOTE: the impact might be cross-site scripting (XSS) or HTTP request smuggling.

EPSS

Процентиль: 67%
0.00531
Низкий

Дефекты

CWE-119

Связанные уязвимости

nvd
больше 18 лет назад

Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing (1) JavaScript or (2) HTTP headers via an unspecified vector, possibly the forwardTo parameter to redirect.do. NOTE: the impact might be cross-site scripting (XSS) or HTTP request smuggling.

EPSS

Процентиль: 67%
0.00531
Низкий

Дефекты

CWE-119