Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-whj9-g8q3-623p

Опубликовано: 12 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 4.8
CVSS3: 4.8

Описание

A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the web interface on Prisma Cloud Compute. This enables a malicious administrator to perform actions in the context of another user's browser when accessed by that other user.

A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the web interface on Prisma Cloud Compute. This enables a malicious administrator to perform actions in the context of another user's browser when accessed by that other user.

EPSS

Процентиль: 59%
0.00378
Низкий

4.8 Medium

CVSS4

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
больше 1 года назад

A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the web interface on Prisma Cloud Compute. This enables a malicious administrator to perform actions in the context of another user's browser when accessed by that other user.

EPSS

Процентиль: 59%
0.00378
Низкий

4.8 Medium

CVSS4

4.8 Medium

CVSS3

Дефекты

CWE-79