exploitDog

CVE-2022-34093

Опубликовано: 14 июл. 2022

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via access_token.php.

Ссылки

https://github.com/edmarmoretti/i3geo/issues/4
Exploit
Third Party Advisory
https://github.com/saladesituacao/i3geo/issues/4
Exploit
Third Party Advisory
https://github.com/wagnerdracha/ProofOfConcept/blob/main/i3geo_proof_of_concept.txt#L44
Exploit
Third Party Advisory
https://owasp.org/www-community/attacks/xss/
Technical Description
Third Party Advisory
https://softwarepublico.gov.br/social/i3geo
Product
https://github.com/edmarmoretti/i3geo/issues/4
Exploit
Third Party Advisory
https://github.com/saladesituacao/i3geo/issues/4
Exploit
Third Party Advisory
https://github.com/wagnerdracha/ProofOfConcept/blob/main/i3geo_proof_of_concept.txt#L44
Exploit
Third Party Advisory
https://owasp.org/www-community/attacks/xss/
Technical Description
Third Party Advisory
https://softwarepublico.gov.br/social/i3geo
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:softwarepublico:i3geo:7.0.5:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.05106

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-29q9-j4j7-vqf4

CVSS3: 6.1

github

около 3 лет назад

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via access_token.php.

EPSS

Процентиль: 89%

0.05106

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79