Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rjh9-46c2-6h7f

Опубликовано: 06 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.1

Описание

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser (no stateful change made or customer data rendered).

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser (no stateful change made or customer data rendered).

EPSS

Процентиль: 60%
0.00398
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-79
CWE-80

Связанные уязвимости

CVSS3: 5.4
nvd
больше 2 лет назад

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser (no stateful change made or customer data rendered).

EPSS

Процентиль: 60%
0.00398
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-79
CWE-80