Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q4wv-f3rp-mjgr

Опубликовано: 27 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

EPSS

Процентиль: 29%
0.00104
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-134

Связанные уязвимости

CVSS3: 9.1
ubuntu
7 месяцев назад

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

CVSS3: 9.1
nvd
7 месяцев назад

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

CVSS3: 9.1
debian
7 месяцев назад

The HttpRequest object allows to get the HTTP headers from the server' ...

CVSS3: 9.1
fstec
7 месяцев назад

Уязвимость сервера универсальной системы мониторинга Zabbix, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 9.1
redos
3 месяца назад

Множественные уязвимости zabbix7-lts-server-pgsql

EPSS

Процентиль: 29%
0.00104
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-134