Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-6216

Опубликовано: 13 апр. 2026
Источник: nvd
CVSS3: 3.5
CVSS2: 4
EPSS Низкий

Описание

A security vulnerability has been detected in DbGate up to 7.1.4. This affects an unknown function of the file packages/web/src/icons/FontIcon.svelte of the component SVG Icon String Handler. Such manipulation of the argument applicationIcon leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 7.1.5 mitigates this issue. It is advisable to upgrade the affected component.

EPSS

Процентиль: 9%
0.00191
Низкий

3.5 Low

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 3.5
github
4 месяца назад

DbGate has cross site scripting via the SVG Icon String Handler component

EPSS

Процентиль: 9%
0.00191
Низкий

3.5 Low

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79