exploitDog

CVE-2013-1823

Опубликовано: 26 мар. 2013

Источник: redhat

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field.

Ссылки на источники

Дополнительная информация

Статус:

Low

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=918784Katello: Notifications page Username XSS

EPSS

Процентиль: 51%

0.00277

Низкий

4.3 Medium

CVSS2

Связанные уязвимости

CVE-2013-1823

nvd

почти 13 лет назад

Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field.

GHSA-4365-vm8j-8w63

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field.

EPSS

Процентиль: 51%

0.00277

Низкий

4.3 Medium

CVSS2