Описание
Cross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote attackers to inject an arbitrary script via unspecified vectors.
Ссылки
- ProductThird Party Advisory
- Third Party Advisory
- Vendor Advisory
- ProductThird Party Advisory
- Third Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 4.2.0 (включая) до 4.2.3 (исключая)
cpe:2.3:a:weseek:growi:*:*:*:*:*:*:*:*
EPSS
Процентиль: 64%
0.00464
Низкий
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
больше 3 лет назад
Cross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote attackers to inject an arbitrary script via unspecified vectors.
EPSS
Процентиль: 64%
0.00464
Низкий
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79