Описание
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/snat.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.
Уязвимые конфигурации
Конфигурация 1Версия до 3.3.25 (включая)
cpe:2.3:a:endian:firewall_community:*:*:*:*:*:*:*:*
EPSS
Процентиль: 6%
0.00168
Низкий
6.4 Medium
CVSS3
5.4 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.4
github
4 месяца назад
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/snat.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.
EPSS
Процентиль: 6%
0.00168
Низкий
6.4 Medium
CVSS3
5.4 Medium
CVSS3
Дефекты
CWE-79