Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rhxp-9ff4-3fcp

Опубликовано: 07 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form field id="Switch Description", name "switch_description"

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form field id="Switch Description", name "switch_description"

EPSS

Процентиль: 79%
0.01259
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
около 3 лет назад

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form field id="Switch Description", name "switch_description"

CVSS3: 4.3
fstec
около 3 лет назад

Уязвимость микропрограммного обеспечения Ethernet–коммутаторов Moxa SDS-3008, связанная с недостаточной защитой структуры веб-страницы, позволяющая нарушителю выполнить произвольный JavaScript-код

EPSS

Процентиль: 79%
0.01259
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79