Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x7fx-57rj-7whh

Опубликовано: 15 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It allows data exfiltration and enables CSRF attacks. The vulnerability requires specific user permissions within the application to exploit successfully.

The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It allows data exfiltration and enables CSRF attacks. The vulnerability requires specific user permissions within the application to exploit successfully.

EPSS

Процентиль: 23%
0.00074
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
около 1 года назад

The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It allows data exfiltration and enables CSRF attacks. The vulnerability requires specific user permissions within the application to exploit successfully.

CVSS3: 4.8
debian
около 1 года назад

The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site S ...

EPSS

Процентиль: 23%
0.00074
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79