Описание
Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.
Ссылки
- Exploit
- Third Party Advisory
- Exploit
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:chatengine_project:chatengine:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 35%
0.00145
Низкий
9.6 Critical
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 9.6
github
больше 2 лет назад
Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.
EPSS
Процентиль: 35%
0.00145
Низкий
9.6 Critical
CVSS3
Дефекты
CWE-79