Описание
Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input, as demonstrated by a crafted attribute of an IMG element in the phone field of a user profile.
Ссылки
Уязвимые конфигурации
Конфигурация 1Версия до 1.2 (включая)Версия до 2.0 (включая)
Одно из
cpe:2.3:a:novell:filr:*:security_update_2:*:*:*:*:*:*
cpe:2.3:a:novell:filr:*:security_update_1:*:*:*:*:*:*
EPSS
Процентиль: 80%
0.01356
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 5.4
github
больше 3 лет назад
Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input, as demonstrated by a crafted attribute of an IMG element in the phone field of a user profile.
EPSS
Процентиль: 80%
0.01356
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79