Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-3442

Опубликовано: 08 июл. 2021
Источник: redhat
CVSS3: 7.1
EPSS Низкий

Описание

A flaw was found in the Red Hat OpenShift API Management product. User input is not validated allowing an authenticated user to inject scripts into some text boxes leading to a XSS attack. The highest threat from this vulnerability is to data confidentiality.

Дополнительная информация

Статус:

Important
Дефект:
CWE-1289
https://bugzilla.redhat.com/show_bug.cgi?id=1930083RHOAM: XSS in 3scale at various places

EPSS

Процентиль: 40%
0.00479
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 5.4
nvd
около 4 лет назад

A flaw was found in the Red Hat OpenShift API Management product. User input is not validated allowing an authenticated user to inject scripts into some text boxes leading to a XSS attack. The highest threat from this vulnerability is to data confidentiality.

CVSS3: 5.4
github
около 4 лет назад

A flaw was found in the Red Hat OpenShift API Management product. User input is not validated allowing an authenticated user to inject scripts into some text boxes leading to a XSS attack. The highest threat from this vulnerability is to data confidentiality.

EPSS

Процентиль: 40%
0.00479
Низкий

7.1 High

CVSS3