HTML Injection

2024-07-3009:47:30

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

html injection

vulnerability

twisted

sanitization

redirect url

malicious scripts

cross-site scripting

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

twisted is vulnerable to an HTML injection. The vulnerability is due to improper sanitization of the redirect URL which attackers can exploit to inject malicious scripts into the web page. potentially leads to Reflected Cross-Site Scripting (XSS) in the redirect response HTML body.