exploitDog

CVE-2017-6591

Опубликовано: 09 мар. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field.

Ссылки

http://morningchen.com/2017/03/09/Cross-site-scripting-vulnerability-in-django-epiceditor/
Exploit
Technical Description
Third Party Advisory
http://www.securityfocus.com/bid/96946
http://morningchen.com/2017/03/09/Cross-site-scripting-vulnerability-in-django-epiceditor/
Exploit
Technical Description
Third Party Advisory
http://www.securityfocus.com/bid/96946

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:django-epiceditor_project:django-epiceditor:0.2.3:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00298

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-xp5m-4c9f-498q

CVSS3: 6.1

github

больше 7 лет назад

django-epiceditor vulnerable to XSS in form field

EPSS

Процентиль: 53%

0.00298

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79