Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q4wv-f3rp-mjgr

Опубликовано: 27 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

EPSS

Процентиль: 38%
0.0017
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-134

Связанные уязвимости

CVSS3: 9.1
ubuntu
больше 1 года назад

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

CVSS3: 9.1
nvd
больше 1 года назад

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

CVSS3: 9.1
debian
больше 1 года назад

The HttpRequest object allows to get the HTTP headers from the server' ...

CVSS3: 9.1
fstec
больше 1 года назад

Уязвимость сервера универсальной системы мониторинга Zabbix, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 9.1
redos
около 1 года назад

Множественные уязвимости zabbix7-lts-server-pgsql

EPSS

Процентиль: 38%
0.0017
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-134