Cross Site Scripting (XSS)

2024-08-1606:13:03

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross site scripting

input validation

output sanitization

dom element

server

client

software

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.9

Confidence

High

JSON

directus is vulnerable to Cross Site Scripting (XSS). The vulnerability is caused due to a missing input validation and output sanitization. This can lead to an application inject an attacker-controlled parameter that will be stored in the server and used by the client into an unsanitized DOM element.