CVE-2018-12234

Опубликовано: 06 сент. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the flexiportal/GeneralInfo.aspx strAction parameter.

Ссылки

http://packetstormsecurity.com/files/155231/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html
https://www.knowcybersec.com/2018/09/first-cve-2018-12234-reflected-XSS.html
Exploit
Third Party Advisory
https://www.thecysec.in/2020/04/xxs-adrenalin-generalinfo-cve-id.html
URL Repurposed
http://packetstormsecurity.com/files/155231/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html
https://www.knowcybersec.com/2018/09/first-cve-2018-12234-reflected-XSS.html
Exploit
Third Party Advisory
https://www.thecysec.in/2020/04/xxs-adrenalin-generalinfo-cve-id.html
URL Repurposed

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:myadrenalin:adrenalin:5.4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.0477

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-frmp-rfv4-pwqh