Описание
templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of the URL, as demonstrated by Internet Explorer.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:etherpad:etherpad:1.7.5:*:*:*:*:*:*:*
EPSS
Процентиль: 55%
0.00328
Низкий
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.1
debian
больше 6 лет назад
templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser doe ...
CVSS3: 6.1
github
больше 3 лет назад
templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of the URL, as demonstrated by Internet Explorer.
EPSS
Процентиль: 55%
0.00328
Низкий
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79