Lucene search

K
gitlabHttps://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-885DBD3D98CFE66C18077A8EC6DC7315
HistoryJun 05, 2023 - 12:00 a.m.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

2023-06-0500:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
7
cross-site scripting
github
admidio

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

34.5%

Cross-site Scripting (XSS) - Stored in GitHub repository admidio/admidio prior to 4.2.8.

Affected configurations

Vulners
Node
packagistadmidioRange<4.2.8
VendorProductVersionCPE
packagistadmidio*cpe:2.3:a:packagist:admidio:*:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

34.5%

Related for GITLAB-885DBD3D98CFE66C18077A8EC6DC7315