Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rp64-rc76-xrq5

Опубликовано: 28 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2

Описание

It is possible to inject HTML code into the page content using the "content" field in the "Application definition" page.

This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer.

It is possible to inject HTML code into the page content using the "content" field in the "Application definition" page.

This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer.

EPSS

Процентиль: 48%
0.00252
Низкий

2 Low

CVSS4

Дефекты

CWE-80

Связанные уязвимости

nvd
11 месяцев назад

It is possible to inject HTML code into the page content using the "content" field in the "Application definition" page. This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer.

EPSS

Процентиль: 48%
0.00252
Низкий

2 Low

CVSS4

Дефекты

CWE-80