CVE-2016-9126

Опубликовано: 28 мар. 2017

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Revive Adserver before 3.2.3 suffers from persistent XSS. Usernames are not properly escaped when displayed in the audit trail widget of the dashboard upon login, allowing persistent XSS attacks. An authenticated user with enough privileges to create other users could exploit the vulnerability to access the administrator account.

Ссылки

https://github.com/revive-adserver/revive-adserver/commit/8d8c6df309ff5fde9dd4770abcd4ec5d2449b3ec
Issue Tracking
Patch
Third Party Advisory
https://hackerone.com/reports/97073
Permissions Required
https://www.revive-adserver.com/security/revive-sa-2016-001/
Patch
Vendor Advisory
https://github.com/revive-adserver/revive-adserver/commit/8d8c6df309ff5fde9dd4770abcd4ec5d2449b3ec
Issue Tracking
Patch
Third Party Advisory
https://hackerone.com/reports/97073
Permissions Required
https://www.revive-adserver.com/security/revive-sa-2016-001/
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*

Версия до 3.2.2 (включая)

EPSS

Процентиль: 49%

0.00264

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-prj8-5jpv-8374