Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-27894

Опубликовано: 04 нояб. 2022
Источник: nvd
CVSS3: 4.8
CVSS3: 5.4
EPSS Низкий

Описание

The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:palantir:foundry_blobster:*:*:*:*:*:*:*:*
Версия от 3.207.0 (включая) до 3.227.0 (исключая)

EPSS

Процентиль: 43%
0.00208
Низкий

4.8 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79
CWE-79

Связанные уязвимости

CVSS3: 5.4
github
больше 3 лет назад

The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0.

EPSS

Процентиль: 43%
0.00208
Низкий

4.8 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79
CWE-79