Описание
HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phishing attacks against an organization.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.7.14 (исключая)
cpe:2.3:a:liquidfiles:liquidfiles:*:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00297
Низкий
5.4 Medium
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-116
CWE-74
Связанные уязвимости
CVSS3: 5.4
github
больше 2 лет назад
HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phishing attacks against an organization.
EPSS
Процентиль: 53%
0.00297
Низкий
5.4 Medium
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-116
CWE-74