Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v23m-2w4c-ghv7

Опубликовано: 29 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

Cross-site Scripting (XSS) vulnerability in HubBank affecting version 1.0.2. This vulnerability allows an attacker to send a specially crafted JavaScript payload to registration and profile forms and trigger the payload when any authenticated user loads the page, resulting in a session takeover.

Cross-site Scripting (XSS) vulnerability in HubBank affecting version 1.0.2. This vulnerability allows an attacker to send a specially crafted JavaScript payload to registration and profile forms and trigger the payload when any authenticated user loads the page, resulting in a session takeover.

EPSS

Процентиль: 24%
0.00082
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.3
nvd
почти 2 года назад

Cross-site Scripting (XSS) vulnerability in HubBank affecting version 1.0.2. This vulnerability allows an attacker to send a specially crafted JavaScript payload to registration and profile forms and trigger the payload when any authenticated user loads the page, resulting in a session takeover.

EPSS

Процентиль: 24%
0.00082
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-79