Описание
Shaarli is a personal bookmarking service. Prior to version 0.16.0, crafting a malicious tag which starting with " prematurely ends the <input> tag on the start page and allows an attacker to add arbitrary html leading to a possible XSS attack. Version 0.16.0 fixes the issue.
Уязвимые конфигурации
Конфигурация 1Версия до 0.16.0 (исключая)
cpe:2.3:a:shaarli_project:shaarli:*:*:*:*:*:*:*:*
EPSS
Процентиль: 8%
0.00027
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 5.4
ubuntu
2 месяца назад
Shaarli is a personal bookmarking service. Prior to version 0.16.0, crafting a malicious tag which starting with `"` prematurely ends the `<input>` tag on the start page and allows an attacker to add arbitrary html leading to a possible XSS attack. Version 0.16.0 fixes the issue.
CVSS3: 5.4
debian
2 месяца назад
Shaarli is a personal bookmarking service. Prior to version 0.16.0, cr ...
EPSS
Процентиль: 8%
0.00027
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79