Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rjcf-2qpv-xpv2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

On BIG-IP 14.1.0-14.1.2.6, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP system if the victim user is granted the admin role.

On BIG-IP 14.1.0-14.1.2.6, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP system if the victim user is granted the admin role.

EPSS

Процентиль: 74%
0.00806
Низкий

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 5.3
nvd
около 5 лет назад

On BIG-IP 14.1.0-14.1.2.6, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP system if the victim user is granted the admin role.

EPSS

Процентиль: 74%
0.00806
Низкий

Дефекты

CWE-400