2 matches found
GHSA-R8F4-HV23-6QP6 Norman API Cross-site Scripting Vulnerability
Impact A vulnerability has been identified in which unauthenticated cross-site scripting XSS in Norman's public API endpoint can be exploited. This can lead to an attacker exploiting the vulnerability to trigger JavaScript code and execute commands remotely. The attack vector was identified as a...
8.3CVSS7.8AI score0.0044EPSS
SaveExploits0References9
Norman API Cross-site Scripting Vulnerability
Impact A vulnerability has been identified in which unauthenticated cross-site scripting XSS in Norman's public API endpoint can be exploited. This can lead to an attacker exploiting the vulnerability to trigger JavaScript code and execute commands remotely. The attack vector was identified as a...
8.3CVSS5.9AI score0.0044EPSS
SaveExploits0References9Affected Software1
20