Описание
A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2. A low-privilege user can store JavaScript in order to exploit a higher-privilege user.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 7.9.0.2 (включая)
cpe:2.3:a:keyfactor:primekey_ejbca:*:*:*:*:*:*:*:*
EPSS
Процентиль: 67%
0.00548
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 5.4
github
около 3 лет назад
A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2. A low-privilege user can store JavaScript in order to exploit a higher-privilege user.
EPSS
Процентиль: 67%
0.00548
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79