exploitDog

CVE-2022-36303

Опубликовано: 19 июл. 2022

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the handle_file_upload function at /web/api/v1/upload/UploadHandler.php.

Ссылки

https://github.com/serghey-rodin/vesta/issues/2252
Exploit
Issue Tracking
Third Party Advisory
https://github.com/serghey-rodin/vesta/issues/2252
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vestacp:vesta_control_panel:1.0.0-5:*:*:*:*:*:*:*

EPSS

Процентиль: 46%

0.0023

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-9jfr-9ph7-2f84

CVSS3: 6.1

github

больше 3 лет назад

Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the handle_file_upload function at /web/api/v1/upload/UploadHandler.php.

EPSS

Процентиль: 46%

0.0023

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79