Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qgq8-952v-8jwq

Опубликовано: 04 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions <=11.0 that may allow a remote, authenticated attacker to create a crafted link which when accessing the page editor an image will render in the victim’s browser. The privileges required to execute this attack are high.

There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions <=11.0 that may allow a remote, authenticated attacker to create a crafted link which when accessing the page editor an image will render in the victim’s browser. The privileges required to execute this attack are high.

EPSS

Процентиль: 40%
0.00181
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
почти 2 года назад

There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when accessing the page editor an image will render in the victim’s browser. The privileges required to execute this attack are high.

EPSS

Процентиль: 40%
0.00181
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79