Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wq9f-h6v9-87rm

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user's authentication token. When combined with CVE-2020-6803, an attacker could fully compromise the system.

A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user's authentication token. When combined with CVE-2020-6803, an attacker could fully compromise the system.

EPSS

Процентиль: 54%
0.00317
Низкий

Связанные уязвимости

CVSS3: 8.8
nvd
почти 6 лет назад

A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user's authentication token. When combined with CVE-2020-6803, an attacker could fully compromise the system.

EPSS

Процентиль: 54%
0.00317
Низкий