CVE-2020-23042

Опубликовано: 22 окт. 2021

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the list and download module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request.

Ссылки

https://www.vulnerability-lab.com/get_content.php?id=2201
Exploit
Third Party Advisory
https://www.vulnerability-lab.com/get_content.php?id=2201
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dropouts:super_backup:2.0.5:*:*:*:*:ipados:*:*

cpe:2.3:a:dropouts:super_backup:2.0.5:*:*:*:*:iphone_os:*:*

EPSS

Процентиль: 55%

0.00328

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-6gq6-5c5r-433r

github

больше 3 лет назад

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request.