exploitDog

CVE-2023-27090

Опубликовано: 20 апр. 2023

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter.

Ссылки

https://gitee.com/xiaobingby/TeaCMS/issues/I6GDDN
Exploit
Third Party Advisory
https://gitee.com/xiaobingby/TeaCMS/issues/I6L9Z2
Exploit
Third Party Advisory
https://gitee.com/xiaobingby/TeaCMS/issues/I6GDDN
Exploit
Third Party Advisory
https://gitee.com/xiaobingby/TeaCMS/issues/I6L9Z2
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:teacms_project:teacms:4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 29%

0.00105

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-6v8r-893r-3f27

CVSS3: 5.4

github

почти 3 года назад

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter.

EPSS

Процентиль: 29%

0.00105

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

CWE-79