Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pmw6-mg69-65jh

Опубликовано: 15 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

NewType WebEIP v3.0 does not properly validate user input, allowing a remote attacker with regular privileges to insert JavaScript into specific parameters, resulting in a Reflected Cross-site Scripting (XSS) attack. The affected product is no longer maintained. It is recommended to upgrade to the new product.

NewType WebEIP v3.0 does not properly validate user input, allowing a remote attacker with regular privileges to insert JavaScript into specific parameters, resulting in a Reflected Cross-site Scripting (XSS) attack. The affected product is no longer maintained. It is recommended to upgrade to the new product.

EPSS

Процентиль: 34%
0.00138
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 1 года назад

NewType WebEIP v3.0 does not properly validate user input, allowing a remote attacker with regular privileges to insert JavaScript into specific parameters, resulting in a Reflected Cross-site Scripting (XSS) attack. The affected product is no longer maintained. It is recommended to upgrade to the new product.

EPSS

Процентиль: 34%
0.00138
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79