Описание
A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0. This vulnerability could allow an authenticated user to upload an infected PDF file and store a malicious JavaScript payload to be executed when the file is uploaded.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:agentejo:cockpit:2.7.0:*:*:*:*:*:*:*
EPSS
Процентиль: 25%
0.00088
Низкий
5.5 Medium
CVSS3
5.4 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
EPSS
Процентиль: 25%
0.00088
Низкий
5.5 Medium
CVSS3
5.4 Medium
CVSS3
Дефекты
CWE-79