exploitDog

CVE-2018-10364

Опубликовано: 30 апр. 2018

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

BigTree before 4.2.22 has XSS in the Users management page via the name or company field.

Ссылки

https://github.com/bigtreecms/BigTree-CMS#changelog
Release Notes
https://github.com/bigtreecms/BigTree-CMS/commit/b2eff67e45b90ca26a62e971e8f0d5d0d70f23e6
Patch
https://github.com/bigtreecms/BigTree-CMS/issues/332
Issue Tracking
Third Party Advisory
https://github.com/bigtreecms/BigTree-CMS#changelog
Release Notes
https://github.com/bigtreecms/BigTree-CMS/commit/b2eff67e45b90ca26a62e971e8f0d5d0d70f23e6
Patch
https://github.com/bigtreecms/BigTree-CMS/issues/332
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*

Версия до 4.2.22 (исключая)

EPSS

Процентиль: 45%

0.00227

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-x4g2-p5px-qv7r

CVSS3: 5.4

github

больше 3 лет назад

BigTree before 4.2.22 has XSS in the Users management page via the name or company field.

EPSS

Процентиль: 45%

0.00227

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79