Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x2p7-rrrj-3m2g

Опубликовано: 23 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users.

Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users.

EPSS

Процентиль: 94%
0.13731
Средний

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 3 лет назад

Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users.

EPSS

Процентиль: 94%
0.13731
Средний

6.1 Medium

CVSS3

Дефекты

CWE-79