Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qvqq-rm9j-cq96

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting (XSS) vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file.

In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting (XSS) vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file.

EPSS

Процентиль: 48%
0.00252
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
почти 6 лет назад

In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting (XSS) vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file.

EPSS

Процентиль: 48%
0.00252
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79