Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38517
HistoryDec 16, 2022 - 7:10 a.m.

Cross-Site Scripting (XSS)

2022-12-1607:10:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
cross-site scripting
github
csaf
advisory document
validation
javascript
vulnerability

EPSS

0.001

Percentile

23.0%

github.com/csaf-poc/csaf_distribution is vulnerable to cross-site scripting. The vulnerability exists due to a lack of validation in the CSAF advisory document which allows an attacker to inject and execute malicious JavaScript.

EPSS

0.001

Percentile

23.0%

Related for VERACODE:38517