Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q4wv-f3rp-mjgr

Опубликовано: 27 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

EPSS

Процентиль: 39%
0.00173
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-134

Связанные уязвимости

CVSS3: 9.1
ubuntu
10 месяцев назад

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

CVSS3: 9.1
nvd
10 месяцев назад

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

CVSS3: 9.1
debian
10 месяцев назад

The HttpRequest object allows to get the HTTP headers from the server' ...

CVSS3: 9.1
fstec
10 месяцев назад

Уязвимость сервера универсальной системы мониторинга Zabbix, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 9.1
redos
6 месяцев назад

Множественные уязвимости zabbix7-lts-server-pgsql

EPSS

Процентиль: 39%
0.00173
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-134