Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xx8r-3wgj-j632

Опубликовано: 14 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 4.6
CVSS3: 4.8

Описание

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuration to a PAN-OS node. This enables impersonation of a legitimate PAN-OS administrator who can perform restricted actions on the PAN-OS node after the execution of JavaScript in the legitimate PAN-OS administrator's browser.

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuration to a PAN-OS node. This enables impersonation of a legitimate PAN-OS administrator who can perform restricted actions on the PAN-OS node after the execution of JavaScript in the legitimate PAN-OS administrator's browser.

EPSS

Процентиль: 51%
0.00278
Низкий

4.6 Medium

CVSS4

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
9 месяцев назад

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuration to a PAN-OS node. This enables impersonation of a legitimate PAN-OS administrator who can perform restricted actions on the PAN-OS node after the execution of JavaScript in the legitimate PAN-OS administrator's browser.

CVSS3: 2.4
fstec
9 месяцев назад

Уязвимость программного обеспечения Palo Alto Networks операционной системы PAN-OS, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)

EPSS

Процентиль: 51%
0.00278
Низкий

4.6 Medium

CVSS4

4.8 Medium

CVSS3

Дефекты

CWE-79