CVE-2020-25735

Опубликовано: 18 сент. 2020

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/add_announcement.php, administration/departments.php, administration/locations.php, expenses/claim_type.php, projects/editproject.php, and general/newnotifications.php.

Ссылки

https://medium.com/%40tehwinsam/webtareas-2-1-c8b406c68c2a
https://sourceforge.net/p/webtareas/tickets/40/
Third Party Advisory
https://sourceforge.net/projects/webtareas/files/
Release Notes
Third Party Advisory
https://medium.com/%40tehwinsam/webtareas-2-1-c8b406c68c2a
https://sourceforge.net/p/webtareas/tickets/40/
Third Party Advisory
https://sourceforge.net/projects/webtareas/files/
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:webtareas_project:webtareas:*:*:*:*:*:*:*:*

Версия до 2.1 (включая)

EPSS

Процентиль: 50%

0.00264

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-569r-pvqr-c78j

github

больше 3 лет назад