Lucene search
K

107 matches found

PyPA
PyPA
added 2022/01/18 3:15 p.m.3 views

PYSEC-2022-43181

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...

6.1CVSS6.5AI score0.01626EPSS
Exploits1References5
OSV
OSV
added 2022/01/18 3:15 p.m.32 views

CVE-2021-44217

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...

6.1CVSS5.7AI score0.01626EPSS
Exploits1References5
OSV
OSV
added 2022/01/18 3:15 p.m.0 views

PYSEC-2022-43181

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...

6.1CVSS6.5AI score0.01626EPSS
Exploits1References5
Prion
Prion
added 2022/01/18 3:15 p.m.12 views

Cross site scripting

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...

4.3CVSS5.9AI score0.01626EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2022/01/18 3:0 p.m.84 views

CVE-2021-44217

Ericsson CodeChecker up to version 6.18.0 contains a stored XSS in the comments component of the reports viewer, exploitable via POST JSON data to the /CodeCheckerService API. This allows remote attackers to inject arbitrary web script or HTML. Related advisories indicate a fix was issued in or a...

6.1CVSS6AI score0.01626EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2022/01/18 3:0 p.m.24 views

CVE-2021-44217

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...

6.2AI score0.01626EPSS
Exploits1References5
CNNVD
CNNVD
added 2022/01/18 12:0 a.m.3 views

Ericsson CodeChecker 跨站脚本漏洞

Codechecker is an analysis tool, defect database and viewer extension for Clang Static Analyzer and Clang Tidy. A security vulnerability exists in Ericsson CodeChecker before 6.18.0 that allows remote attackers to inject arbitrary web script or HTML via POST JSON data from the /CodeCheckerService...

6.1CVSS6.5AI score0.01626EPSS
Exploits1References6
Rows per page
Query Builder