Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 5

Количество 5

ubuntu логотип

CVE-2025-11687

8 месяцев назад

A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie theft and other client-side attacks — via a crafted URL that supplies a malicious value to the q GET parameter (reflected DOM XSS).

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2025-11687

8 месяцев назад

A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie theft and other client-side attacks — via a crafted URL that supplies a malicious value to the q GET parameter (reflected DOM XSS).

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2025-11687

8 месяцев назад

A flaw was found in the gi-docgen. This vulnerability allows arbitrary ...

CVSS3: 6.1
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:20497-1

5 месяцев назад

Security update for python-gi-docgen

EPSS: Низкий
github логотип

GHSA-6p6h-rqr6-62mv

8 месяцев назад

GI-DocGen vulnerable to Reflected XSS via unescaped query strings

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-11687

A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie theft and other client-side attacks — via a crafted URL that supplies a malicious value to the q GET parameter (reflected DOM XSS).

CVSS3: 6.1
0%
Низкий
8 месяцев назад
nvd логотип
CVE-2025-11687

A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie theft and other client-side attacks — via a crafted URL that supplies a malicious value to the q GET parameter (reflected DOM XSS).

CVSS3: 6.1
0%
Низкий
8 месяцев назад
debian логотип
CVE-2025-11687

A flaw was found in the gi-docgen. This vulnerability allows arbitrary ...

CVSS3: 6.1
0%
Низкий
8 месяцев назад
suse-cvrf логотип
openSUSE-SU-2026:20497-1

Security update for python-gi-docgen

0%
Низкий
5 месяцев назад
github логотип
GHSA-6p6h-rqr6-62mv

GI-DocGen vulnerable to Reflected XSS via unescaped query strings

CVSS3: 6.1
0%
Низкий
8 месяцев назад

Уязвимостей на страницу