Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q4wv-f3rp-mjgr

Опубликовано: 27 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

EPSS

Процентиль: 61%
0.00945
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-134

Связанные уязвимости

CVSS3: 9.1
ubuntu
почти 2 года назад

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

CVSS3: 9.1
nvd
почти 2 года назад

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

CVSS3: 9.1
debian
почти 2 года назад

The HttpRequest object allows to get the HTTP headers from the server' ...

CVSS3: 9.1
fstec
почти 2 года назад

Уязвимость сервера универсальной системы мониторинга Zabbix, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 9.1
altlinux
около 5 лет назад

ALT-PU-2021-5022: package `zabbix` update to version 5.4.6-alt1

EPSS

Процентиль: 61%
0.00945
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-134