CVE-2020-35395

Опубликовано: 15 дек. 2020

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field

Ссылки

https://nikhilkumar01.medium.com/cve-2020-35395-cd393ac8371c
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/49146
Exploit
Third Party Advisory
VDB Entry
https://nikhilkumar01.medium.com/cve-2020-35395-cd393ac8371c
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/49146
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:egavilanmedia:expense_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 46%

0.00234

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-4rc3-796r-hwf9

github

больше 3 лет назад