CVE-2020-19587

Опубликовано: 14 сент. 2022

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

Cross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI.

Ссылки

https://github.com/Deepak983/CVE-2020-19587/blob/main/_Stored%20XSS%20in%20MIAdminStyles.i4%20through%20privileges%20escalation.pdf
Exploit
Technical Description
Third Party Advisory
https://www.linkedin.com/in/deepak-sharma-72a044b4/
Permissions Required
Third Party Advisory
https://github.com/Deepak983/CVE-2020-19587/blob/main/_Stored%20XSS%20in%20MIAdminStyles.i4%20through%20privileges%20escalation.pdf
Exploit
Technical Description
Third Party Advisory
https://www.linkedin.com/in/deepak-sharma-72a044b4/
Permissions Required
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:idera:yellowfin_business_intelligence:7.3:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00211

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-p26j-hx3p-vjcf