CVE-2015-3432

Опубликовано: 19 сент. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Pydio (formerly AjaXplorer) before 6.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Pydio XSS Vulnerabilities."

Ссылки

http://www.securityfocus.com/bid/74596
Third Party Advisory
VDB Entry
https://pydio.com/en/community/releases/pydio-core/pydio-607-security-release
Patch
Vendor Advisory
http://www.securityfocus.com/bid/74596
Third Party Advisory
VDB Entry
https://pydio.com/en/community/releases/pydio-core/pydio-607-security-release
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:pydio:pydio:*:*:*:*:*:*:*:*

Версия до 6.0.6 (включая)

EPSS

Процентиль: 46%

0.00229

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2015-3432

CVSS3: 6.1

debian

больше 8 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Pydio (formerly ...

GHSA-hvmp-c256-p3mq

CVSS3: 6.1

github

больше 3 лет назад

EPSS

Процентиль: 46%

0.00229

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79