Описание
Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to issue*.
Ссылки
- Issue TrackingVendor Advisory
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- Issue TrackingThird Party Advisory
- ExploitThird Party Advisory
- Issue TrackingVendor Advisory
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- Issue TrackingThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.4.20 (исключая)
cpe:2.3:a:roundup-tracker:roundup:*:*:*:*:*:*:*:*
EPSS
Процентиль: 73%
0.0156
Низкий
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.1
ubuntu
больше 6 лет назад
Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to issue*.
CVSS3: 6.1
debian
больше 6 лет назад
Multiple cross-site scripting (XSS) vulnerabilities in Roundup before ...
CVSS3: 6.1
github
больше 4 лет назад
Multiple cross-site scripting (XSS) vulnerabilities in Roundup
EPSS
Процентиль: 73%
0.0156
Низкий
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79