exploitDog

CVE-2017-18352

Опубликовано: 17 дек. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting (XSS) from invalid URLs.

Ссылки

https://bugs.chromium.org/p/chromium/issues/detail?id=759111
Exploit
Issue Tracking
Third Party Advisory
https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e
Patch
https://github.com/GoogleChrome/rendertron/pull/88
Patch
Third Party Advisory
https://bugs.chromium.org/p/chromium/issues/detail?id=759111
Exploit
Issue Tracking
Third Party Advisory
https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e
Patch
https://github.com/GoogleChrome/rendertron/pull/88
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:google:rendertron:1.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00154

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-j88m-953w-8r2c

CVSS3: 6.1

github

около 7 лет назад

rendertron XSS vulnerability

EPSS

Процентиль: 37%

0.00154

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79