Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r9j3-884r-cxhp

Опубликовано: 16 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning.  The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.

HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning.  The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.

EPSS

Процентиль: 3%
0.00017
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 5.3
nvd
6 месяцев назад

HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning.  The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.

EPSS

Процентиль: 3%
0.00017
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-346