4 matches found
Script injection
Impact A malicious internal actor is able to upload documentation content with malicious scripts. These scripts would normally be sanitized by the TechDocs frontend, but by tricking a user to visit the content via the TechDocs API, the content sanitazion will be bypassed. If the TechDocs API is...
8.1CVSS0.1AI score0.01269EPSS
SaveExploits0References5Affected Software1
20