exploitDog

CVE-2021-3950

Опубликовано: 19 нояб. 2021

Источник: nvd

CVSS3: 8.8

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Ссылки

https://github.com/django-helpdesk/django-helpdesk/commit/04483bdac3b5196737516398b5ce0383875a5c60
Patch
Third Party Advisory
https://huntr.dev/bounties/4d7a5fdd-b2de-467a-ade0-3f2fb386638e
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/django-helpdesk/django-helpdesk/commit/04483bdac3b5196737516398b5ce0383875a5c60
Patch
Third Party Advisory
https://huntr.dev/bounties/4d7a5fdd-b2de-467a-ade0-3f2fb386638e
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:django-helpdesk_project:django-helpdesk:*:*:*:*:*:*:*:*

Версия до 0.3.1 (исключая)

EPSS

Процентиль: 57%

0.00357

Низкий

8.8 High

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-vfrc-ggmc-5jwv

CVSS3: 8.8

github

около 4 лет назад

Cross-site Scripting in django-helpdesk

EPSS

Процентиль: 57%

0.00357

Низкий

8.8 High

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79