Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wwph-r5xc-xhvj

Опубликовано: 10 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the request to be sent to a completely different Domain/IP address.

Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the request to be sent to a completely different Domain/IP address.

EPSS

Процентиль: 37%
0.0044
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 3 лет назад

Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the request to be sent to a completely different Domain/IP address.

CVSS3: 6.1
fstec
больше 3 лет назад

Уязвимость сервера резервного копирования данных Veritas Appliance, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS) и вызвать отказ в обслуживании

EPSS

Процентиль: 37%
0.0044
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79