Описание
Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts. Attackers can insert iframe and script payloads in application copyright text to execute arbitrary JavaScript in victim browsers.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- Product
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:rukovoditel:rukovoditel:3.4.1:*:*:*:*:*:*:*
EPSS
Процентиль: 8%
0.0003
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 4.6
github
около 2 месяцев назад
Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts. Attackers can insert iframe and script payloads in application copyright text to execute arbitrary JavaScript in victim browsers.
EPSS
Процентиль: 8%
0.0003
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79