Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qwgg-mr66-9fcp

Опубликовано: 16 дек. 2021
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Lychee-v3 3.2.16 is affected by a Cross Site Scripting (XSS) vulnerability in php/Access/Guest.php. The function exit will terminate the script and print the message to the user. The message will contain albumID which is controlled by the user.

Lychee-v3 3.2.16 is affected by a Cross Site Scripting (XSS) vulnerability in php/Access/Guest.php. The function exit will terminate the script and print the message to the user. The message will contain albumID which is controlled by the user.

EPSS

Процентиль: 53%
0.00307
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
около 4 лет назад

Lychee-v3 3.2.16 is affected by a Cross Site Scripting (XSS) vulnerability in php/Access/Guest.php. The function exit will terminate the script and print the message to the user. The message will contain albumID which is controlled by the user.

EPSS

Процентиль: 53%
0.00307
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79