exploitDog

CVE-2015-9286

Опубликовано: 30 апр. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.

Ссылки

https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529
Release Notes
Third Party Advisory
https://github.com/NodeBB/NodeBB/pull/3371
Patch
Third Party Advisory
https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625
Exploit
Third Party Advisory
https://www.vulnerability-lab.com/get_content.php?id=1608
Exploit
Third Party Advisory
https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529
Release Notes
Third Party Advisory
https://github.com/NodeBB/NodeBB/pull/3371
Patch
Third Party Advisory
https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625
Exploit
Third Party Advisory
https://www.vulnerability-lab.com/get_content.php?id=1608
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nodebb:nodebb:*:*:*:*:*:*:*:*

Версия до 0.7.3 (исключая)

EPSS

Процентиль: 54%

0.00308

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-72fv-qgj6-2w2p

CVSS3: 6.1

github

почти 7 лет назад

Cross-site Scripting in NodeBB

EPSS

Процентиль: 54%

0.00308

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79