Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w678-3c66-v2gr

Опубликовано: 02 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

The BigFix SaaS's HTTP responses were missing some security headers. The absence of these headers weakens the application's client-side security posture, making it more vulnerable to common web attacks that these headers are designed to mitigate, such as Cross-Site Scripting (XSS), Clickjacking, and protocol downgrade attacks.

The BigFix SaaS's HTTP responses were missing some security headers. The absence of these headers weakens the application's client-side security posture, making it more vulnerable to common web attacks that these headers are designed to mitigate, such as Cross-Site Scripting (XSS), Clickjacking, and protocol downgrade attacks.

EPSS

Процентиль: 9%
0.00032
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-1188

Связанные уязвимости

CVSS3: 5.4
nvd
2 месяца назад

The BigFix SaaS's HTTP responses were missing some security headers. The absence of these headers weakens the application's client-side security posture, making it more vulnerable to common web attacks that these headers are designed to mitigate, such as Cross-Site Scripting (XSS), Clickjacking, and protocol downgrade attacks.

EPSS

Процентиль: 9%
0.00032
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-1188