Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w9pr-cvj2-cxfc

Опубликовано: 05 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.4

Описание

Stored Cross-Site Scripting (XSS) vulnerability discovered in JATOS v3.9.3. The vulnerability exists in the description component of the study section, where an attacker can inject JavaScript into the description field. This allows for the execution of malicious scripts when an admin views the description, potentially leading to account takeover and unauthorized actions.

Stored Cross-Site Scripting (XSS) vulnerability discovered in JATOS v3.9.3. The vulnerability exists in the description component of the study section, where an attacker can inject JavaScript into the description field. This allows for the execution of malicious scripts when an admin views the description, potentially leading to account takeover and unauthorized actions.

EPSS

Процентиль: 28%
0.00101
Низкий

8.4 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 8.4
nvd
больше 1 года назад

Stored Cross-Site Scripting (XSS) vulnerability discovered in JATOS v3.9.3. The vulnerability exists in the description component of the study section, where an attacker can inject JavaScript into the description field. This allows for the execution of malicious scripts when an admin views the description, potentially leading to account takeover and unauthorized actions.

EPSS

Процентиль: 28%
0.00101
Низкий

8.4 High

CVSS3

Дефекты

CWE-79