Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r4m8-8238-w9cw

Опубликовано: 10 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting.

The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting.

EPSS

Процентиль: 31%
0.00115
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.3
nvd
почти 3 года назад

The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting.

EPSS

Процентиль: 31%
0.00115
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79