Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pfqv-7pgg-f6v4

Опубликовано: 24 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.6

Описание

A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the color parameter.

A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the color parameter.

EPSS

Процентиль: 14%
0.00045
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.6
nvd
3 месяца назад

A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the color parameter.

EPSS

Процентиль: 14%
0.00045
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-79