Описание
Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 20.04.01 (включая)
cpe:2.3:a:rcos:submitty:*:*:*:*:*:*:*:*
EPSS
Процентиль: 60%
0.00403
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
около 3 лет назад
Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow.
EPSS
Процентиль: 60%
0.00403
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79