Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qgw9-46r7-vc44

Опубликовано: 07 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2.2
CVSS3: 4.8

Описание

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data.

We have already fixed the vulnerability in the following version: QuLog Center 1.8.2.923 ( 2025/08/27 ) and later

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data.

We have already fixed the vulnerability in the following version: QuLog Center 1.8.2.923 ( 2025/08/27 ) and later

EPSS

Процентиль: 26%
0.00091
Низкий

2.2 Low

CVSS4

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
3 месяца назад

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuLog Center 1.8.2.923 ( 2025/08/27 ) and later

EPSS

Процентиль: 26%
0.00091
Низкий

2.2 Low

CVSS4

4.8 Medium

CVSS3

Дефекты

CWE-79