Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87952
HistoryOct 10, 2022 - 12:00 a.m.

Zinc delete user function cross-site scripting vulnerability

2022-10-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
zinc
full-text indexing
cross-site scripting
vulnerability
delete user
sensitive information
user credentials
zinc labs

EPSS

0

Percentile

12.6%

Zinc is a full-text indexing search engine open sourced by Zinc Labs. Zinc v0.1.9 and later, v0.3.1 and earlier versions have a cross-site scripting vulnerability that could be exploited by attackers to obtain sensitive information such as user credentials.

EPSS

0

Percentile

12.6%