Cross site scripting

2020-04-0223:15:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.9%

JSON

Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandling of the tags and version fields in helperFunctions/mongo_task_conversion.py.

CPENameOperatorVersion
firmware_analysis_and_comparison_tooleq3.0

CPE	Name	Operator	Version
	firmware_analysis_and_comparison_tool	eq	3.0

References

github.com/fkie-cad/FACT_core/issues/375

github.com/fkie-cad/FACT_core/pull/376