exploitDog

CVE-2022-34094

Опубликовано: 14 июл. 2022

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Средний

Описание

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via request_token.php.

Ссылки

https://github.com/edmarmoretti/i3geo/issues/5
Exploit
Third Party Advisory
https://github.com/saladesituacao/i3geo/issues/5
Exploit
Third Party Advisory
https://github.com/wagnerdracha/ProofOfConcept/blob/main/i3geo_proof_of_concept.txt#L65
Exploit
Third Party Advisory
https://owasp.org/www-community/attacks/xss/
Technical Description
Third Party Advisory
https://softwarepublico.gov.br/social/i3geo
Product
https://github.com/edmarmoretti/i3geo/issues/5
Exploit
Third Party Advisory
https://github.com/saladesituacao/i3geo/issues/5
Exploit
Third Party Advisory
https://github.com/wagnerdracha/ProofOfConcept/blob/main/i3geo_proof_of_concept.txt#L65
Exploit
Third Party Advisory
https://owasp.org/www-community/attacks/xss/
Technical Description
Third Party Advisory
https://softwarepublico.gov.br/social/i3geo
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:softwarepublico:i3geo:7.0.5:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.11346

Средний

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-47v8-x5c9-fwg5

CVSS3: 6.1

github

больше 3 лет назад

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via request_token.php.

EPSS

Процентиль: 93%

0.11346

Средний

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79