Логотип exploitDog
bind:CVE-2025-68385
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-68385

Количество 4

Количество 4

redhat логотип

CVE-2025-68385

4 месяца назад

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a method in Vega bypassing a previous Vega XSS mitigation.

CVSS3: 7.2
EPSS: Низкий
nvd логотип

CVE-2025-68385

4 месяца назад

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a method in Vega bypassing a previous Vega XSS mitigation.

CVSS3: 7.2
EPSS: Низкий
debian логотип

CVE-2025-68385

4 месяца назад

Improper neutralization of input during web page generation ('Cross-si ...

CVSS3: 7.2
EPSS: Низкий
github логотип

GHSA-x89f-99hf-gmr7

4 месяца назад

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a method in Vega bypassing a previous Vega XSS mitigation.

CVSS3: 7.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2025-68385

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a method in Vega bypassing a previous Vega XSS mitigation.

CVSS3: 7.2
0%
Низкий
4 месяца назад
nvd логотип
CVE-2025-68385

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a method in Vega bypassing a previous Vega XSS mitigation.

CVSS3: 7.2
0%
Низкий
4 месяца назад
debian логотип
CVE-2025-68385

Improper neutralization of input during web page generation ('Cross-si ...

CVSS3: 7.2
0%
Низкий
4 месяца назад
github логотип
GHSA-x89f-99hf-gmr7

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a method in Vega bypassing a previous Vega XSS mitigation.

CVSS3: 7.2
0%
Низкий
4 месяца назад

Уязвимостей на страницу