CVE-2022-36180

Опубликовано: 22 нояб. 2022

Источник: nvd

CVSS3: 9.6

EPSS Низкий

Описание

Fusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via /fusiondirectory/index.php?message=[injection], /fusiondirectory/index.php?message=invalidparameter&plug={Injection], /fusiondirectory/index.php?signout=1&message=[injection]&plug=106.

Ссылки

http://fusiondirectory.com
Broken Link
https://lists.debian.org/debian-lts-announce/2023/07/msg00009.html
https://yoroi.company/research/cve-advisory-full-disclosure-multiple-vulnerabilities/
Exploit
Third Party Advisory
http://fusiondirectory.com
Broken Link
https://lists.debian.org/debian-lts-announce/2023/07/msg00009.html
https://yoroi.company/research/cve-advisory-full-disclosure-multiple-vulnerabilities/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fusiondirectory:fusiondirectory:1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00159

Низкий

9.6 Critical

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVE-2022-36180

CVSS3: 9.6

ubuntu

около 3 лет назад

CVE-2022-36180

CVSS3: 9.6

debian

около 3 лет назад

Fusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via /f ...

GHSA-f585-354r-gp9r

CVSS3: 9.6

github

около 3 лет назад

EPSS

Процентиль: 37%

0.00159

Низкий

9.6 Critical

CVSS3

Дефекты

CWE-79