Lucene search
+L

4 matches found

Mend
Mend
•added 2019/12/26 10:43 p.m.•7 views

CVE-2019-20008

In Archery before 1.3, inserting an XSS payload into a project name either by creating a new project or editing an existing one will result in stored XSS on the vulnerability-scan scheduling page...

5.4CVSS0.00916EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2019/12/26 12:00 a.m.•5 views

PT-2019-16042

Name of the Vulnerable Software and Affected Versions Archery versions prior to 1.3 Description The issue allows for stored XSS on the vulnerability-scan scheduling page when an XSS payload is inserted into a project name. This can occur either by creating a new project or editing an existing one...

5.4CVSS0.00916EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2019/12/26 12:00 a.m.•3 views

PT-2019-20131

Name of the Vulnerable Software and Affected Versions Archery versions prior to 1.3 Description The issue allows for stored XSS on the vulnerability-scan scheduling page when an XSS payload is inserted into a project name. This can occur either by creating a new project or editing an existing one...

5.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/26 12:00 a.m.•6 views

CVE-2019-20008: Improper Neutralization of Input During Web Page Generation

In Archery before 1.3, inserting an XSS payload into a project name either by creating a new project or editing an existing one will result in stored XSS on the vulnerability-scan scheduling page...

5.4CVSS6AI score0.00916EPSS
SaveExploits1References2
Rows per page
Query Builder