Описание
Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in GitHub repository causefx/organizr prior to 2.1.1810. Account takeover and privilege escalation
Ссылки
- PatchThird Party Advisory
- ExploitPatchThird Party Advisory
- PatchThird Party Advisory
- ExploitPatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.1.1810 (исключая)
cpe:2.3:a:organizr:organizr:*:*:*:*:*:*:*:*
EPSS
Процентиль: 64%
0.00462
Низкий
9.6 Critical
CVSS3
8.4 High
CVSS3
6 Medium
CVSS2
Дефекты
CWE-79
CWE-79
Связанные уязвимости
CVSS3: 8.4
github
почти 4 года назад
Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in GitHub repository causefx/organizr prior to 2.1.1810. Account takeover and privilege escalation
EPSS
Процентиль: 64%
0.00462
Низкий
9.6 Critical
CVSS3
8.4 High
CVSS3
6 Medium
CVSS2
Дефекты
CWE-79
CWE-79