exploitDog

CVE-2021-3831

Опубликовано: 14 дек. 2021

Источник: nvd

CVSS3: 7.1

CVSS3: 6.1

CVSS2: 4.3

EPSS Средний

Описание

gnuboard5 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Ссылки

https://github.com/gnuboard/gnuboard5/commit/2e81619ea87bc9c0b4a073d8df3c7693a6fdbf0d
Patch
Third Party Advisory
https://huntr.dev/bounties/25775287-88cd-4f00-b978-692d627dff04
Exploit
Patch
Third Party Advisory
https://github.com/gnuboard/gnuboard5/commit/2e81619ea87bc9c0b4a073d8df3c7693a6fdbf0d
Patch
Third Party Advisory
https://huntr.dev/bounties/25775287-88cd-4f00-b978-692d627dff04
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnuboard:gnuboard5:*:*:*:*:*:*:*:*

Версия до 5.4.20 (исключая)

EPSS

Процентиль: 96%

0.26611

Средний

7.1 High

CVSS3

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-xq54-j4gh-pm4j

github

около 4 лет назад

gnuboard5 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

EPSS

Процентиль: 96%

0.26611

Средний

7.1 High

CVSS3

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79