Описание
Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. There is a stored XSS in the Inbox. The input is displayed using the safe Jinja2 attribute, and thus not sanitized upon display. This issue has been patched in version 0.1.0.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.1.0 (исключая)
cpe:2.3:a:hushline:hush_line:*:*:*:*:*:*:*:*
EPSS
Процентиль: 52%
0.00288
Низкий
8.8 High
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-79
CWE-79
EPSS
Процентиль: 52%
0.00288
Низкий
8.8 High
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-79
CWE-79