Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-27576

Опубликовано: 08 мар. 2021
Источник: nvd
CVSS3: 5.4
CVSS2: 3.5
EPSS Низкий

Описание

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS). Users are able to create folders in the web application. The folder name is insufficiently validated resulting in a stored cross-site scripting vulnerability.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:maxum:rumpus:8.2.13:*:*:*:*:*:*:*
cpe:2.3:a:maxum:rumpus:8.2.14:*:*:*:*:*:*:*

EPSS

Процентиль: 51%
0.00281
Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

github
больше 3 лет назад

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS). Users are able to create folders in the web application. The folder name is insufficiently validated resulting in a stored cross-site scripting vulnerability.

EPSS

Процентиль: 51%
0.00281
Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79