exploitDog

CVE-2022-40365

Опубликовано: 14 сент. 2022

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Cross site scripting (XSS) vulnerability in ouqiang gocron through 1.5.3, allows attackers to execute arbitrary code via scope.row.hostname in web/vue/src/pages/taskLog/list.vue.

Ссылки

https://github.com/ouqiang/gocron
Product
Release Notes
Third Party Advisory
https://github.com/ouqiang/gocron/issues/362
Exploit
Issue Tracking
Third Party Advisory
https://github.com/ouqiang/gocron
Product
Release Notes
Third Party Advisory
https://github.com/ouqiang/gocron/issues/362
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gocron_project:gocron:*:*:*:*:*:*:*:*

Версия до 1.5.3 (включая)

EPSS

Процентиль: 64%

0.0047

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-r947-2crg-xc39

CVSS3: 6.1

github

больше 3 лет назад

ouqiang gocron Cross-site scripting vulnerability

EPSS

Процентиль: 64%

0.0047

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79