CVE-2020-9008

Опубликовано: 25 фев. 2020

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile widget in the People Tool profile editor.

Ссылки

https://blackboard.com
Product
https://github.com/kyletimmermans/blackboard-xss/blob/master/CVE-2020-9008.md
Exploit
Third Party Advisory
https://blackboard.com
Product
https://github.com/kyletimmermans/blackboard-xss/blob/master/CVE-2020-9008.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:blackboard:blackboard_learn:*:*:*:*:*:*:*:*

Версия до 9.1 (исключая)

cpe:2.3:a:blackboard:blackboard_learn:9.1:q2_2017:*:*:*:*:*:*

cpe:2.3:a:blackboard:blackboard_learn:9.1:q2_2017_cumulative_update1:*:*:*:*:*:*

cpe:2.3:a:blackboard:blackboard_learn:9.1:q2_2017_cumulative_update2:*:*:*:*:*:*

cpe:2.3:a:blackboard:blackboard_learn:9.1:q2_2017_cumulative_update3:*:*:*:*:*:*

cpe:2.3:a:blackboard:blackboard_learn:9.1:q2_2017_cumulative_update4:*:*:*:*:*:*

cpe:2.3:a:blackboard:blackboard_learn:9.1:q2_2017_cumulative_update5:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.0018

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-hf77-c8vc-7pmp

github

больше 3 лет назад