Описание
A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.
Ссылки
- ExploitThird Party Advisory
- Release NotesVendor Advisory
- ExploitThird Party Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:lansweeper:lansweeper:9.1.20.2:*:*:*:*:*:*:*
EPSS
Процентиль: 91%
0.06609
Низкий
9.1 Critical
CVSS3
4.8 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-80
CWE-79
Связанные уязвимости
CVSS3: 4.8
github
почти 4 года назад
A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.
EPSS
Процентиль: 91%
0.06609
Низкий
9.1 Critical
CVSS3
4.8 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-80
CWE-79