exploitDog

CVE-2021-3783

Опубликовано: 15 сент. 2021

Источник: nvd

CVSS3: 6.6

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Ссылки

https://github.com/yourls/yourls/commit/94f6bab91182142c96ff11f481585b445449efd4
Patch
Third Party Advisory
https://huntr.dev/bounties/b688e553-d0d9-4ddf-95a3-ff4b78004984
Issue Tracking
Patch
Third Party Advisory
https://github.com/yourls/yourls/commit/94f6bab91182142c96ff11f481585b445449efd4
Patch
Third Party Advisory
https://huntr.dev/bounties/b688e553-d0d9-4ddf-95a3-ff4b78004984
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:yourls:yourls:*:*:*:*:*:*:*:*

Версия до 1.8.2 (включая)

EPSS

Процентиль: 57%

0.00355

Низкий

6.6 Medium

CVSS3

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-cpq8-x35g-m439

CVSS3: 6.6

github

больше 4 лет назад

Cross-site Scripting in yourls

EPSS

Процентиль: 57%

0.00355

Низкий

6.6 Medium

CVSS3

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

CWE-79