Lucene search
+L

6 matches found

BDU FSTEC
BDU FSTEC
•added 2022/04/11 12:00 a.m.•24 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the absence of filtering for the default branch name. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

5.4CVSS6.3AI score0.00991EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2019/12/11 3:15 p.m.•18 views

CVE-2019-15007

The review resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the name of a missing branch...

4.8CVSS5.4AI score0.00596EPSS
SaveExploits0References2
NVD
NVD
•added 2019/12/11 3:15 p.m.•37 views

CVE-2019-15007

The review resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the name of a missing branch...

4.8CVSS4.9AI score0.00596EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/11 12:00 a.m.•3 views

CVE-2019-15007: Improper Neutralization of Input During Web Page Generation

The review resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the name of a missing branch...

4.8CVSS5.1AI score0.00596EPSS
SaveExploits0References2
Atlassian
Atlassian
•added 2019/12/10 2:03 a.m.•55 views

XSS in the the review resource through the name of a missing branch - CVE-2019-15007

The review resource in Atlassian Fisheye before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the name of a missing branch...

4.8CVSS4.2AI score0.00596EPSS
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2019/12/10 1:43 a.m.•88 views

XSS in the the review resource through the name of a missing branch - CVE-2019-15007

The review resource in Atlassian Crucible before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the name of a missing branch...

4.8CVSS4.4AI score0.00596EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder