Описание
Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...
Ссылки
- PatchThird Party Advisory
- ExploitThird Party Advisory
- PatchThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.42 (исключая)
cpe:2.3:a:clinical-genomics:scout:*:*:*:*:*:*:*:*
EPSS
Процентиль: 54%
0.00314
Низкий
9.4 Critical
CVSS3
8.2 High
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-918
CWE-918
Связанные уязвимости
EPSS
Процентиль: 54%
0.00314
Низкий
9.4 Critical
CVSS3
8.2 High
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-918
CWE-918