Описание
In Sherpa Orchestrator 141851, the functionality for adding or updating licenses allows for stored XSS attacks by an administrator through the name parameter. The XSS payload can execute when the license expires.
Ссылки
- Not Applicable
- Third Party Advisory
- Product
- Not Applicable
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:sherparpa:sherpa_orchestrator:141851:*:*:*:*:*:*:*
EPSS
Процентиль: 15%
0.00048
Низкий
4.4 Medium
CVSS3
4.8 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 4.4
github
10 месяцев назад
In Sherpa Orchestrator 141851, the functionality for adding or updating licenses allows for stored XSS attacks by an administrator through the name parameter. The XSS payload can execute when the license expires.
EPSS
Процентиль: 15%
0.00048
Низкий
4.4 Medium
CVSS3
4.8 Medium
CVSS3
Дефекты
CWE-79